A path traversal flaw in the R7WebsSecurityHandlerfunction of Tenda CH22’s httpd component allows an attacker to manipulate file paths and read or alter arbitrary files on the device. The vulnerability, identified as CWE‑22, can be triggered remotely via crafted HTTP requests, potentially exposing sensitive configuration data or enabling further attacks such as code execution if the attacker can write malicious files.

The affected hardware is the Tenda CH22 router with firmware version 1.0.0.6(468). No other versions or models are listed in the official CNA data.

The CVSS base score of 6.9 indicates medium to high severity. EPSS information is not available, and the issue is not currently listed in the CISA KEV catalog. However, a public exploit exists, implying that attackers can exploit this weakness from outside the local network if the device’s web interface is reachable.