PT-2023-24991 · Unknown · Guantang Equipment Management System

CVE-2023-34736 · Publicado 2023-06-28 · Atualizado 2023-07-10

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Guantang Equipment Management System version 4.12

Description The Guantang Equipment Management System is affected by an issue that allows Arbitrary File Upload. This could potentially lead to unauthorized access or malicious activities.

Recommendations For Guantang Equipment Management System version 4.12, consider restricting access to file upload functionalities until a patch or fix is available. As a temporary workaround, disabling the file upload feature can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2023-34736

Produtos afetados

Guantang Equipment Management System

Referências · 6

• 🔥 https://github.com/prismbreak/vulnerabilities/issues/5 · Exploit
• https://osv.dev/vulnerability/CVE-2023-34736 · Aviso do Fabricante
• https://t.me/cvenotify/53254 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-34736 · Nota de Segurança
• https://t.me/cvenotify/53956 · Publicação no Telegram
• https://t.me/cibsecurity/65704 · Publicação no Telegram