CVE-2023-48371: critical vulnerability in ITPison OMICARD EDM 's SMS
ITPison OMICARD EDM 's SMS - Arbitrary File Upload
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 1.0%
ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
ITPison · OMICARD EDM 's SMSRelated CVEs — ITPison OMICARD EDM 's SMS
In the same product, most dangerous first.