Authenticated Remote Code Execution via the file name of an uploaded file
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 0.5%
probabilidade de exploração
0.5%top 58% das CVEs
exploração observada
nãonenhuma fonte reporta
This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Zenitel · TCIS-3+Referências
https://wiki.zenitel.com/wiki/Turbine_9.3_-_Release_noteshttps://wiki.zenitel.com/wiki/VSF-Display_Series_9.3_Release_Noteshttps://wiki.zenitel.com/wiki/VSF-Fortitude6_9.3_Release_Noteshttps://wiki.zenitel.com/wiki/VSF-Fortitude8_9.3_Release_Noteshttps://wiki.zenitel.com/wiki/ZIPS_9.3_-_Release_noteshttps://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf