Technical impact
An arbitrary file upload vulnerability in Sunnet's CTMS and CPAS allows a privileged remote attacker to upload a malicious file and execute it as a web shell. This provides the attacker with arbitrary code execution on the server, enabling full compromise of the underlying operating system and all data stored therein.
Affected Systems
The vulnerability affects the Sunnet CPAS and Sunnet CTMS applications. No specific product versions are listed in the available information, so all currently deployed instances of these applications are considered at risk until a vendor fix is issued.
Risk and Exploitability
The CVSS score of 8.6 categorizes this flaw as high severity, and although the EPSS score is not available, the lack of a current KEV listing does not mitigate the risk. The likely attack vector is a remote privileged attacker who can access the file upload functionality; from there, the attacker can upload a web shell and then execute it to achieve full code execution on the server.
