Vendor
EyeLock nano NXT biometric devices contain a path traversal vulnerability in logdownload.php that allows unauthenticated attackers to read arbitrary system files via the path parameter.