MEDIUM🇬🇧 English

CVE-2023-45599

CVSS 5.5v3.1pub. 2024-03-05upd. 2025-03-03

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

  • Ailux Imx6

    APP
    Ailux
    < 1.0.7-2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-5457HIGH7.5ten sam produkt

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by t...

CVE-2023-5456HIGH8.1ten sam produkt

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows ...

CVE-2023-45591HIGH7.5ten sam produkt

A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary a...

CVE-2023-45593MEDIUM6.8ten sam produkt

A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning th...

CVE-2023-45595MEDIUM5.9ten sam produkt

A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” function...