D6 Ultra
Monthly
Absolute path traversal in the Zettlab D6 Ultra NAS firmware before version 1.7.0 permits authenticated network-adjacent users to navigate outside their designated personal folder and read files from arbitrary directories on the device. The vulnerability stems from insufficient sanitization of user-supplied file paths, allowing the personal-folder boundary to be bypassed using absolute path references. No public exploit code or CISA KEV listing has been identified at time of analysis; the fix is confirmed in version 1.7.0.
Absolute path traversal in the Zettlab D6 Ultra NAS firmware before version 1.7.0 permits authenticated network-adjacent users to navigate outside their designated personal folder and read files from arbitrary directories on the device. The vulnerability stems from insufficient sanitization of user-supplied file paths, allowing the personal-folder boundary to be bypassed using absolute path references. No public exploit code or CISA KEV listing has been identified at time of analysis; the fix is confirmed in version 1.7.0.