An issue exists in the Video Extension in Suprema BioStar 2 prior to 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal.
supremainc biostar 2