PT-2023-17197 · Meinberg · Meinbergs Ltos
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Meinbergs LTOS versions prior to V7.06.013
Description
The configuration file upload function in Meinbergs LTOS does not correctly validate input, allowing a remote authenticated attacker with high privileges to execute arbitrary commands.
Recommendations
For versions prior to V7.06.013, update to version V7.06.013 or later to resolve the issue. As a temporary workaround, consider restricting access to the configuration file upload function to minimize the risk of exploitation.
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Meinbergs Ltos