The AVM KEN! web server allows remote malicious users to read arbitrary files via a .. (dot dot) attack.
avm ken 1.3.10
avm ken 1.4.30