PT-2023-22726 · Unknown · Tmt Lockcell

Efe Ozel + 5 · Published 2023-06-13 · Updated 2023-08-02 · CVE-2023-3049

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TMT Lockcell versions prior to 15

Description The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability, which allows Command Injection in TMT Lockcell.

Recommendations For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent command injection until a patch is available.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-3049

Affected Products

Tmt Lockcell

References · 6

• 🔥 https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection · Exploit
• https://osv.dev/vulnerability/CVE-2023-3049 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3049 · Security Note
• https://usom.gov.tr/bildirim/tr-23-0345 · Note
• https://t.me/cibsecurity/65159 · Telegram Post
• https://t.me/cvenotify/55184 · Telegram Post