LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.1epss 0.9%
exploitation probability
0.9%top 43% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path parameters in the smartgui interface. Attackers can exploit the upload endpoint with directory traversal sequences to write files to arbitrary locations on the system, enabling remote code execution.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
LifeSize · ClearSeapublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/44390unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.