Byzoro Networks Security Gateway Vulnerability Allows Sensitive Information Theft via Upload File Component
CVE-2024-28520

6.5MEDIUM

Key Information:

Vendor

Byzoro Networks

Vendor
CVE Published:
4 April 2024

What is CVE-2024-28520?

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component.

References

https://github.com/aknbg1thub/cve/blob/main/upload.md

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.