CVE-2024-31161

Name of the Vulnerable Software and Affected Versions ASUS Download Master (affected versions not specified)

Description The upload functionality does not properly filter user input, allowing remote attackers with administrative privilege to upload any file to any location. This can include uploading malicious web page files to the website directory, enabling the execution of arbitrary system commands when the webpage is browsed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.