CVE-2023-45599CWE-646

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote…

Medium · published March 5, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.5th percentile
Weakness
CWE-646 · Reliance on File Name or Extension of Externally-Supplied File
Published
2024-03-05T11:34Z
EPSS history
Timeline
  • 05 MAR 11:34Z
    A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote…
    cvelistv5