PT-2025-17578 · Tcpwave · Tcpwave Ddi
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
TCPWave DDI version 11.34P1C2
Description
The issue allows for Remote Code Execution via Unrestricted File Upload combined with Path Traversal.
Recommendations
For TCPWave DDI version 11.34P1C2, consider restricting access to file upload functionality to minimize the risk of exploitation until a patch is available.
Exploit
Fix
RCE
Unrestricted File Upload
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tcpwave Ddi