PT-2023-11483 · Uffizio · Uffizio'S Gps Tracker

CVE-2020-17485 · Publicado 2023-12-16 · Atualizado 2023-12-20

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Uffizio's GPS Tracker all versions

Description A Remote Code Execution issue exists, allowing the web server to be compromised by uploading and executing a web/reverse shell. This enables an attacker to run commands, browse system files, and access local resources.

Recommendations For all versions, consider disabling the web server functionality or restricting access to it until a fix is available. As a temporary workaround, restrict the ability to upload files to the web server to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2020-17485

Produtos afetados

Uffizio'S Gps Tracker

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-17485 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-21-287-02 · Nota
• https://uffizio.com · Nota
• https://twitter.com/CVEnew/status/1735946007962337467 · Publicação no Twitter