Directory Traversal vulnerability in Kalkitech ASE ASE61850 IEDSmart upto and including version 2.3.5 allows attackers to read/write arbitrary files via the IEC61850 File Transfer protocol.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')