Byzoro Smart S150 Management Platform Backup File download.php information disclosure

CVE-2024-0716

What is CVE-2024-0716?

An information disclosure vulnerability has been identified in the Byzoro Smart S150 Management Platform, specifically within the Backup File Handler component located at /log/download.php. This security flaw allows attackers to exploit the system remotely, potentially disclosing sensitive information. The complexity associated with successfully executing this attack is considerable, and although the exploit has been publicly disclosed, effective exploitation may require advanced techniques. Efforts to communicate this issue to the vendor have gone unacknowledged.

References