PT-2021-19479 · Frontier · Frontier Ichris

L00Neyhacker · Published 2021-05-29 · Updated 2021-06-10 · CVE-2021-31703

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Frontier ichris versions 5.18 and earlier

Description The issue allows users to upload malicious executable files that might later be downloaded and run by any client user.

Recommendations For versions 5.18 and earlier, consider restricting file upload capabilities to prevent the upload of malicious executable files until a fix is available.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-31703

Affected Products

Frontier Ichris

References · 5

• 🔥 https://github.com/l00neyhacker/CVE-2021-31703 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-31703 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31703 · Vendor Advisory
• https://t.me/cvenotify/15280 · Telegram Post
• https://t.me/cvenotify/16080 · Telegram Post