CVE-2023-48371
ITPison OMICARD EDM 's SMS - Arbitrary File Upload
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.8EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
ITPison · OMICARD EDM 's SMSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →