CVE-2024-12700

Tibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type

CVSS 8.7 HIGHEPSS 0.6%CWE-434

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.7EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 dez 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Tibbo · AggreGate Network Manager

Referências

https://aggregate.digital/downloads.html https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-05