Описание
SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code.
Ссылки
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.5 (исключая)
Одновременно
cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.01566
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434
Связанные уязвимости
github
больше 3 лет назад
SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code.
EPSS
Процентиль: 81%
0.01566
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-434