PT-2025-16886 · Wallos · Wallos

Published 2025-04-16 · Updated 2025-04-20 · CVE-2024-55372

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wallos versions <=2.38.2

Description The issue concerns a file upload vulnerability in the restore database function. This vulnerability allows unauthenticated users to restore a database by uploading a ZIP file, the contents of which are extracted on the server. This enables an unauthenticated attacker to upload malicious files to the server. Once a web shell is installed, the attacker can execute arbitrary commands.

Recommendations For Wallos versions <=2.38.2, as a temporary workaround, consider disabling the restore database function until a patch is available. Restrict access to the database restoration feature to minimize the risk of exploitation. Avoid using the restore database function with untrusted ZIP files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2024-55372

Affected Products

Wallos

References · 6

• 🔥 https://datafarm.co.th/blog/CVE-2024-55371-and-CVE-2024-55372-Malicious-File-Upload-to-RCE-in-Wallos-Application · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-55372 · Security Note
• https://osv.dev/vulnerability/CVE-2024-55372 · Vendor Advisory
• https://twitter.com/CVEnew/status/1913823760827769345 · Twitter Post
• https://twitter.com/CVETracker/status/1912959434898223399 · Twitter Post
• https://t.me/cvedetector/23178 · Telegram Post