CVE-2024-8330CWE-434

Gether Technology 6SHR System - Unrestricted File Upload

High · published August 30, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
45.2
In the wild
Unconfirmed
What it is

6SHR system from Gether Technology does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload web shell scripts and use them to execute arbitrary system commands on the server.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00550 · 45.2th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-08-30T02:29Z
EPSS history
Timeline
  • 30 AUG 02:29Z
    Gether Technology 6SHR System - Unrestricted File Upload
    cvelistv5