CVE-2023-45599
EUVD-2023-4989105.03.2024, 12:15
A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ailux | imx6 | 𝑥 < 1.0.7-2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-646 - Reliance on File Name or Extension of Externally-Supplied FileThe software allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion.
- CWE-434 - Unrestricted Upload of File with Dangerous TypeThe software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.