Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.Referenceshttps://www.twcert.org.tw/tw/cp-132-3846-7790c-1.html