CVE-2023-48243
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.…
Published: 2024-01-10 · CVSS: 8.1 · CVSS 3.1
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to obtain remote code execution (RCE) with root privileges on the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7