PT-2020-13289
CVE-2020-12843
·
تاريخ النشر
2020-09-24
·
تاريخ التحديث
2020-09-27
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ismartgate PRO version 1.5.9
Description
The issue allows malicious file uploads through the form used for uploading sounds to garage doors, requiring the use of magic bytes for WAV files.
Recommendations
For ismartgate PRO version 1.5.9, consider restricting access to the sound upload form until a fix is available, and ensure that all uploaded files are thoroughly validated to prevent malicious uploads.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾