Arbitrary File Upload Vulnerability in SolarView Compact 6.0 by Badboycxcc
CVE-2022-31374

9.8CRITICAL

Key Information:

Vendor

Contec

Status
Sv-cpt-mc310 Firmware
Vendor
CVE Published:
21 June 2022

What is CVE-2022-31374?

The SolarView Compact 6.0 product by Badboycxcc is susceptible to an arbitrary file upload vulnerability. This flaw allows attackers to upload a specially crafted PHP file, which can then be executed to run arbitrary code on the server. This capability can lead to unauthorized access and control over the affected system, posing significant risks to the integrity and confidentiality of data.

References

https://github.com/badboycxcc/SolarView_Compact_6.0_upload
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.