PT-2018-12890 · Cela · Cela Link Clr-M20

Safak Aslan

·

CVE-2018-15137

·

Publicado

2018-08-08

·

Atualizado

2018-10-23

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CeLa Link CLR-M20 devices (affected versions not specified)
Description The issue allows unauthorized users to upload arbitrary files, including asp, aspx, cfm, html, jhtml, jsp, or shtml, to the device. This can lead to remote code execution. The WebDAV feature is exploited using the PUT method to upload files.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-15137

Produtos afetados

Cela Link Clr-M20