The vulnerability allows an authenticated remote attacker to upload any file type and then execute it on the server. This enables the attacker to plant a web shell backdoor and run arbitrary code with the same privileges as the application. The weakness is a classic unrestricted file upload flaw listed as CWE-434, exposing the application to serious exploitation. The impact is limited to systems where the attacker can authenticate to the document management interface, but once authenticated the attacker can take full control of the impacted server. Based on this behavior, it can be inferred that the attacker may be able to compromise confidentiality, integrity, and availability, or move laterally within the infrastructure, though these specifics are not explicitly stated in the CVE.

The affected product is the 2100 Technology Official Document Management System. All installations of the system that are running versions prior to 5.0.105 are vulnerable to this flaw. The vendor has issued an update to version 5.0.105 or later to address the issue.

The CVSS score of 8.7 classifies this problem as high severity. No EPSS value is available, but the combination of authentication requirement and arbitrary code execution suggests that the exploitation probability could be significant in environments where attacker credentials are compromised or weak. This vulnerability is not listed in the CISA KEV catalog, yet the potential damage when exploited warrants serious attention. Given that the attack requires a valid authenticated session, the most likely path involves obtaining or guessing valid user credentials and then uploading a malicious payload through the web interface. Once the payload is executed, the attacker can run any code on the server.