CVE-2023-5492: fallo de gravedad media en Byzoro Smart S45F Multi-Service Secure Gateway…
Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 2.1%
A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241644. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVEs relacionadas — Byzoro Smart S45F Multi-Service Secure Gateway…
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-4873MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injectionEPSS 22.1%CVE-2023-5494MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injectionEPSS 7.7%CVE-2023-5488MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted uploadEPSS 2.1%CVE-2023-5493MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted uploadEPSS 2.0%CVE-2023-5491MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted uploadEPSS 2.0%CVE-2023-5490MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted uploadEPSS 2.0%