github.com
https://github.com/Yang-Nankai/Vulnerabilities/blob/main/DataCube3%20Shell%20Code%20Injection.md CVE-2024-34854
CRITICAL
F-logic DataCube3 /admin/transceiver_schedule.php File Upload Vulnerability
Record summary
CVE-2024-34854 has a selected CVSS score of 9.8 (critical).
Description
F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Dec 5, 2024 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated May 30, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
DataCube3Browse F-logic / DataCube3Default status: unknown | VulnCheck, CVE List | 1.0 | affected |