Byzoro Smart S20 HTTP POST Request updateos.php unrestricted upload

CVE-2023-6574

What is CVE-2023-6574?

A vulnerability exists in the Byzoro Smart S20 device affecting versions up to 20231120, specifically within the HTTP POST Request Handler. This issue allows for unrestricted file uploads through manipulation of the '1_file_upload' argument in the /sysmanage/updateos.php file. Attackers may exploit this vulnerability remotely, potentially compromising the security of the device. Public disclosure of the exploit has already occurred, increasing the urgency for affected users to act swiftly. The vendor was notified of this vulnerability prior to its disclosure but has not provided any response.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References