Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-62wx-5h4r-79p8

Опубликовано: 05 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 47%
0.00242
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-646

Связанные уязвимости

CVSS3: 5.5
nvd
почти 2 года назад

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 47%
0.00242
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-646