permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal and access to other unauthorized files or resources.
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842