Mbedthis AppWeb HTTP server prior to 1.1.3 allows remote malicious users to bypass access restrictions via a URI with mixed case characters.
mbedthis appweb http server