L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
History

Wed, 11 Dec 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: twcert

Published: 2023-06-16T00:00:00

Updated: 2024-12-11T20:21:26.970Z

Reserved: 2023-05-15T00:00:00

Link: CVE-2023-32752

cve-icon Vulnrichment

Updated: 2024-08-02T15:25:36.992Z

cve-icon NVD

Status : Modified

Published: 2023-06-16T04:15:13.717

Modified: 2024-11-21T08:03:58.563

Link: CVE-2023-32752

cve-icon Redhat

No data.