CVE-2024-8330

NVD Published Date: August 30, 2024 at 03:15 AM
NVD Last Modified: September 05, 2024 at 01:41 PM
Download Patch
Vulnerability ID
CVE-2024-8330
Severity
HIGH
Severity Score
8.8
Summary
6SHR system from Gether Technology does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload web shell scripts and use them to execute arbitrary system commands on the server.
References
Mitigation and Patches
-
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
CWE-434

Recent Publish

CVE-2024-8329

CVE-2024-45491

CVE-2024-8327

CVE-2024-8328

CVE-2024-45492

CVE-2024-45490

See SecOps Solution
in action

Schedule Demo
Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions
hello@secopsolution.com
+569-231-213
Compare
Qualys Cloud Agent Tenable Nessus Rapid7 InsightVM
Company
About Us Contact Career
Resources
CVE Windows KB Case Studies eBooks Policy Templates Blog Webinar
Try It
Patch Astra EPSS Calculator Contact Free Scan Schedule Demo Log In
© 2024  SecOps Solution, Inc.| Privacy Policy | Terms and Conditions .
Social Media :