Zhejiang Dahua Technology Co., Ltd. Vulnerabilities and Affected Products
Vulnerabilities associated with Smart Park Integrated Management Platform.
Products
Clear product- EIMS1 vulnerability
- Smart Cloud Gateway Registration Management Platform1 vulnerability
- Smart Park Integrated Management Platform1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-7309CRITICAL | Dahua Smart Park Integrated Management Platform Front-End Arbitrary File UploadA path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary files to the server via crafted SOAP requests, including executable JSP payloads. Successful exploitation may lead to remote code execution (RCE) and full compromise of the affected system. The vulnerability… | CVSS10.0v4.0 | EPSS0.813% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |