CVE-2023-5493

🗓️ 10 Oct 2023 16:00:07Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

Vulnerability found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928, allowing remote unrestricted file upload via /useratte/web.php

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-5493	10 Oct 202320:22	–	circl
CNNVD	Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform Code Issue Vulnerability	10 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-5493 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload	10 Oct 202316:00	–	cvelist
EUVD	EUVD-2023-57807	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5493	10 Oct 202316:15	–	nvd
OSV	CVE-2023-5493	10 Oct 202316:15	–	osv
Prion	Out-of-bounds	10 Oct 202316:15	–	prion
RedhatCVE	CVE-2023-5493	23 May 202504:32	–	redhatcve

NVD

Vulners

Node

byzoro smart_s45f_firmwareRange≤20230928

AND

byzoro smart_s45fMatch-

[
  {
    "vendor": "Byzoro",
    "product": "Smart S45F Multi-Service Secure Gateway Intelligent Management Platform",
    "versions": [
      {
        "version": "20230928",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/llixixi/cve/blob/main/s45_upload_web.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
file_upload	binary	/useratte/web.php	Unrestricted file upload via file_upload parameter in /useratte/web.php.	CWE-434

21 Nov 2024 08:41Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.3 - 8.8

CVSS 26.5

CVSS 36.3

EPSS0.00637

CWE-434