PT-2026-2459 · Unknown · Aos-8 Mobility Conductor+1
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
mobility conductors versions AOS-8 and AOS-10
Description
An arbitrary file upload issue exists in the web-based management interface. Successful exploitation could allow an authenticated malicious actor to upload arbitrary files with elevated privileges and execute arbitrary commands on the underlying operating system.
Recommendations
Update to a newer version that resolves this issue. As a temporary workaround, restrict access to the web-based management interface to authorized personnel only.
Correção
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Mobility Conductors Aos-10
Aos-8 Mobility Conductor