PT-2023-24991 · Unknown · Guantang Equipment Management System

Published 2023-06-28 · Updated 2023-07-10 · CVE-2023-34736

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Guantang Equipment Management System version 4.12

Description The Guantang Equipment Management System is affected by an issue that allows Arbitrary File Upload. This could potentially lead to unauthorized access or malicious activities.

Recommendations For Guantang Equipment Management System version 4.12, consider restricting access to file upload functionalities until a patch or fix is available. As a temporary workaround, disabling the file upload feature can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-34736

Affected Products

Guantang Equipment Management System

References · 6

• 🔥 https://github.com/prismbreak/vulnerabilities/issues/5 · Exploit
• https://osv.dev/vulnerability/CVE-2023-34736 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34736 · Security Note
• https://t.me/cvenotify/53254 · Telegram Post
• https://t.me/cvenotify/53956 · Telegram Post
• https://t.me/cibsecurity/65704 · Telegram Post