PT-2014-4316 · Ithoughts · Ithoughtshd

James Davis + 1 · Publicado 2014-03-26 · Atualizado 2014-03-26 · CVE-2014-1827

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions iThoughtsHD app version 4.19

Description The issue allows remote attackers to upload arbitrary files by exploiting the WiFi Transfer feature. This is achieved by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file.

Recommendations For iThoughtsHD app version 4.19, consider disabling the WiFi Transfer feature until a patch is available to prevent exploitation. Restrict access to file uploads to minimize the risk of arbitrary file uploads.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-1827

Produtos afetados

Ithoughtshd

Referências · 2

• 🔥 http://madirish.net/559 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-1827 · Nota de Segurança