PT-2020-13289
CVE-2020-12843
·
Published
2020-09-24
·
Updated
2020-09-27
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ismartgate PRO version 1.5.9
Description
The issue allows malicious file uploads through the form used for uploading sounds to garage doors, requiring the use of magic bytes for WAV files.
Recommendations
For ismartgate PRO version 1.5.9, consider restricting access to the sound upload form until a fix is available, and ensure that all uploaded files are thoroughly validated to prevent malicious uploads.
Found an issue in the description? Have something to add? Feel free to write us 👾