PT-2020-13283
CVE-2020-12837
·
Published
2020-09-24
·
Updated
2020-09-27
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ismartgate PRO version 1.5.9
Description
The issue allows malicious file uploads through the form used for uploading images to garage doors, requiring the use of PNG magic bytes.
Recommendations
For ismartgate PRO version 1.5.9, consider restricting access to the image upload form until a fix is available, and ensure that all uploaded files are thoroughly validated to prevent malicious uploads.
Found an issue in the description? Have something to add? Feel free to write us 👾