Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request.