Insufficient Verification Vulnerability in SolarView Compact by Contec
CVE-2022-35239
8.8HIGH
What is CVE-2022-35239?
The image file management feature in the SolarView Compact devices (models SV-CPT-MC310 and SV-CPT-MC310F, version 7.23 and earlier) is susceptible to an insufficient verification vulnerability. This flaw allows remote authenticated attackers to upload specially crafted PHP files, which can lead to the execution of arbitrary PHP code on the server. Proper controls and checks on the file upload process are crucial to mitigate the risk associated with this vulnerability, enabling attackers to manipulate the system.
Affected Version(s)
SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier