PT-2024-13259
CVE-2023-45595
·
تاريخ النشر
2024-03-05
·
تاريخ التحديث
2024-03-05
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
AiLux imx6 bundle versions prior to imx6 1.0.7-2
Description
A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file configuration” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device.
Recommendations
For AiLux imx6 bundle versions prior to imx6 1.0.7-2, update to version imx6 1.0.7-2 or later to resolve the issue. As a temporary workaround, consider restricting access to the “file configuration” functionality to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾