CVE-2021-20659
CVE-2021-20659
SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code.
Produtos afetados
Contec Co., Ltd. · SolarView CompactQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://jvn.jp/en/jp/JVN37417423/index.htmlhttps://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdfhttps://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf