exploitDog

CVE-2023-3049

Опубликовано: 13 июн. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection.This issue affects Lockcell: before 15.

Ссылки

https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/
Exploit
Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-23-0345
Third Party Advisory
https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/
Exploit
Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-23-0345
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tmtmakine:lockcell_firmware:*:*:*:*:*:*:*:*

Версия до 15.0 (исключая)

cpe:2.3:h:tmtmakine:lockcell:-:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01413

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-88gf-qqgm-77w7

CVSS3: 10

github

больше 2 лет назад

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection.This issue affects Lockcell: before 15.

EPSS

Процентиль: 80%

0.01413

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434