CVE-2022-38484

EUVD-2022-41067
An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Portal prior to version 0.1. A remote authenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with web server privileges.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
agevoltagevolt
𝑥
< 0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://citadelo.com/download/CVE-2022-38484.pdf
https://citadelo.com/download/CVE-2022-38484.pdf