INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')