Remote code execution

2021-02-1604:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.9%

JSON

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.

CPENameOperatorVersion
voicege3.0.0
voicelt3.3.8

CPE	Name	Operator	Version
	voice	ge	3.0.0
	voice	lt	3.3.8

References

www.mutare.com/security-adv-mutare-2021-001-mutare-voice/