PT-2018-8550
CVE-2017-9970
·
Published
2018-02-12
·
Updated
2018-03-09
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
StruxureOn Gateway versions 1.1.3 and prior
Description:
A remote code execution issue exists, allowing for the upload of a zip file with crafted metadata to any directory on the host machine, potentially leading to remote code execution.
Recommendations:
For StruxureOn Gateway versions 1.1.3 and prior, update to a version later than 1.1.3 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾