PT-2024-23801
CVE-2024-31161
·
تاريخ النشر
2024-06-14
·
تاريخ التحديث
2024-08-16
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ASUS Download Master (affected versions not specified)
Description
The upload functionality does not properly filter user input, allowing remote attackers with administrative privilege to upload any file to any location. This can include uploading malicious web page files to the website directory, enabling the execution of arbitrary system commands when the webpage is browsed.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾