Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m3qv-h8r8-8436

Опубликовано: 16 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

EPSS

Процентиль: 73%
0.00786
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

EPSS

Процентиль: 73%
0.00786
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434