CVE-2024-49398CWE-434

Unrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100

High · published October 17, 2024

CVSS v4.0
8.8
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00520 · 43.3th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-10-17T16:17Z
EPSS history
Timeline
  • 17 OCT 16:17Z
    Unrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe3100
    cvelistv5