PT-2023-22726 · Unknown · Tmt Lockcell

Efe Ozel + 5 · Publicado 2023-06-13 · Atualizado 2026-05-22 · CVE-2023-3049

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TMT Lockcell versions prior to 15

Description The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability, which allows Command Injection in TMT Lockcell.

Recommendations For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent command injection until a patch is available.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2023-3049

Produtos afetados

Tmt Lockcell

Referências · 8

• 🔥 https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection · Exploit
• https://t.me/cveNotify/164516 · Publicação no Telegram
• https://t.me/cvenotify/55184 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-3049 · Nota de Segurança
• https://t.me/cibsecurity/65159 · Publicação no Telegram
• https://usom.gov.tr/bildirim/tr-23-0345 · Nota
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0345 · Nota
• https://osv.dev/vulnerability/CVE-2023-3049 · Aviso do Fabricante