PT-2021-7796 · Unknown · Aris Controller

Published

2021-07-04

·

Updated

2021-07-04

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ARIS controller embedded software (affected versions not specified)
Description The issue is related to an unlimited file upload vulnerability in the ARIS controller's embedded software, allowing a remote attacker to execute arbitrary code using a specially crafted file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-02915

Affected Products

Aris Controller