CVE-2020-7569

8.8HIGH

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to uplo

发布于: 11/19/2020更新于: 11/21/2024
在NVD查看在MITRE查看

描述

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code execution.

AI分析AI驱动

受影响产品

schneider-electricwebreports

参考资料