SUNNET WMPro - Command Injection

CVE-2023-35850

What is CVE-2023-35850?

The SUNNET WMPro portal's file management function is susceptible to insufficient filtering of user input. This vulnerability can be exploited by a remote attacker possessing administrative privileges or a privileged account, allowing them to inject and execute arbitrary system commands. The exploit may enable the attacker to manipulate system operations, potentially resulting in service disruption or unauthorized actions within the system.

References