CVE-2023-3836

MEDIUMNuclei

Dahua Smart Park Management unrestricted upload

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-3836 has a selected CVSS score of 6.3 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePoint_addImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235162 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 25, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1
Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Smart Park Management

Browse Dahua / Smart Park Management
CVE List20230713affected

smart_parking_management

Browse dahuasecurity / smart_parking_management
VulnCheckVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubzh-byte/CVE-2023-3836Repository PoCby zh-byte0Not analyzed2 files

5.1 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALDahua Smart Park Management - Arbitrary File UploadCVSS 9.8

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePoint_addImgIco?.

Impact

Unauthenticated attackers can upload arbitrary files to the Dahua wisdom park management platform, potentially enabling remote code execution and complete system compromise.

Remediation

Apply the latest security patch or update provided by the vendor to fix the arbitrary file upload vulnerability.

WeaknessesCWE-434
AuthorsHuTa0
Template tagscve2023cvedahuafileuploadintrusivercedahuasecurityvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:dahuasecurity:smart_parking_management:*:*:*:*:*:*:*:*
Shodan: html:"/WPMS/asset"
Shodan: http.html:"/wpms/asset"
FOFA: body="/wpms/asset"
https://github.com/qiuhuihk/cve/blob/main/upload.md https://nvd.nist.gov/vuln/detail/CVE-2023-3836 https://vuldb.com/?ctiid.235162 https://vuldb.com/?id.235162 https://github.com/1f3lse/taiE

Source: ProjectDiscovery

References

4