Byzoro S210 HTTP POST Request uploadfile.php unrestricted upload

CVE-2023-6576

What is CVE-2023-6576?

A security vulnerability exists in the Byzoro S210, specifically affecting the HTTP POST Request Handler component's file_upload argument. The flaw allows for unrestricted file uploads through the /Tool/uploadfile.php file, posing a significant risk as it can be exploited remotely. Attackers may leverage this vulnerability to upload malicious files, potentially compromising the system's integrity and security. Although the vendor was notified about the vulnerability disclosure, there has been no response to address the issue. Immediate action is recommended for users of affected versions.

References