CVE-2019-6268
No fix known EPSS <1%CVSS 7.5
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow.
Products: rad secflow-2v_firmware, denx u-boot