CVE-2022-40981CWE-434

ETIC Telecom Remote Access Server Unrestricted Upload of File with Dangerous Type

Medium · published November 10, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload. An attacker could take advantage of this to store malicious files on the server, which could override sensitive and useful existing files on the filesystem, fill the hard disk to full capacity, or compromise the affected device or computers with administrator level privileges connected to the affected device.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00561 · 45.9th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-11-10T21:31Z
EPSS history
Timeline
  • 10 NOV 21:31Z
    ETIC Telecom Remote Access Server Unrestricted Upload of File with Dangerous Type
    cvelistv5