PT-2018-9014

CVE-2018-0686

·

Published

2018-11-15

·

Updated

2018-12-17

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Denbun by NEOJAPAN Inc. versions V3.3P R4.0 and earlier Denbun by NEOJAPAN Inc. versions V3.3I R4.0 and earlier
Description The issue allows remote authenticated attackers to upload and execute any executable files.
Recommendations For Denbun by NEOJAPAN Inc. versions V3.3P R4.0 and earlier, restrict access to file upload functionality until a fix is available. For Denbun by NEOJAPAN Inc. versions V3.3I R4.0 and earlier, restrict access to file upload functionality until a fix is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-434: Unrestricted Upload of File with Dangerous Type
Related identifiers
CVE-2018-0686
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com