github.comexploit
https://github.com/llixixi/cve/blob/main/s45_upload_licence.md CVE-2023-5492
MEDIUM
Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload
Record summary
CVE-2023-5492 has a selected CVSS score of 6.3 (medium).
Description
A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241644. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Smart S45F Multi-Service Secure Gateway Intelligent Management PlatformBrowse Byzoro / Smart S45F Multi-Service Secure Gateway Intelligent Management Platform | CVE List | 20230928 | affected |
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-5492 VDB-241644 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.241644 VDB-241644 | Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted uploadvdb entryTechnical description
https://vuldb.com/?id.241644 Submit #213949 | Byzro Networks Smart S45F multi-service security gateway intelligent management platform has a file upload vulnerability.Third-party advisory
https://vuldb.com/?submit.213949