← back
CVE-2023-3049

File Upload in TMT's Lockcell

CVSS 9.8 CRITICALEPSS 3.7%CWE-434
Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
TMT · Lockcell
public PoCs found — 1
cve_referencefordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0345https://www.usom.gov.tr/bildirim/tr-23-0345