Millions of Arris routers are vulnerable to path traversal attacks

The muhttpd server 1.1.5 (last official release 2010) has a path traversal vulnerability. The latest release of muhttpd is version 1.1.7 (released June 1, 2022). Unfortunately, the Arris firmware is based on the vulnerable version of muhttpd.