CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g. asp aspx cfm html jhtml jsp or shtml) which causes remote code execution as well. Because of the WebDAV feature it is possible to upload arbitrary files by utilizing the PUT method.