CVE-2019-10478

An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0

published April 5, 2019

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. An unrestricted file upload vulnerability in the Front Circle Controller glytoolcgi/settingfile_upload.cgi allows attackers to upload supplied data. This can be used to place attacker controlled code on the filesystem that can be executed and can lead to a reverse root shell.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01874 · 79.2th percentile
Published
2019-04-05T18:35Z
EPSS history
Timeline
  • 05 APR 18:35Z
    An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0
    cvelistv5