CVE-2024-31161

Katalog CVE

CVSS 7.2 · High EPSS 0,53%

Kerentanan Unrestricted Upload of File with Dangerous Type pada asus download master. Skor CVSS 3.1 7.2 (High) menurut cert.org.tw.

Deskripsi (NVD)

The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location. They may even upload malicious web page files to the website directory, allowing arbitrary system commands to be executed upon browsing the webpage.

Rincian

Terbit di NVD

14 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber cert.org.tw
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.twcert.org.tw/en/cp-139-7866-469e0-2.html advisory pihak ketiga
• https://www.twcert.org.tw/tw/cp-132-7865-d3823-1.html advisory pihak ketiga