CVE-2022-39045

Name of the Vulnerable Software and Affected Versions Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020

Description A file write issue exists in the httpd upload.cgi functionality. This can be triggered by a specially-crafted HTTP request, leading to arbitrary file upload. An attacker can exploit this by sending a crafted HTTP request.

Recommendations For version G5.0.1.5-210720-141020, consider restricting access to the upload.cgi functionality until a fix is available. As a temporary workaround, disabling the upload functionality can help minimize the risk of exploitation.