Arbitrary Write with wwwupload.cgi
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
In short
A vulnerability in wwwupload.cgi allows an attacker to write files anywhere on the system by using path traversal tricks, potentially taking complete control of the device.
Technical detail
The wwwupload.cgi endpoint fails to properly validate file paths, enabling a low-privileged remote attacker to perform arbitrary file write operations via path traversal (CWE-22). This can result in overwriting critical system files and achieving remote code execution or full system compromise.
Summary generated and translated by AI from the official description.
A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint. Due to path traversal this can lead to overwriting arbitrary files on the device and achieving a full system compromise.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H