CVE-2024-12700

Tibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type

CVSS 8.7 HIGHEPSS 0.6%CWE-434

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Tibbo · AggreGate Network Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://aggregate.digital/downloads.html https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-05