by Kastro
Paper/Archive/CVE-2021-44159

CVE-2021-44159

4MOSAn GCB Doctor — 4MOSAn GCB Doctor - Unrestricted Upload of File

EPSS 4%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 89.2.892 × 2017.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.

Affected

ProductAffectedFixed inSource
GCB Doctorunspecified – 20210811(2.0)–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/tw/cp-132-5395-eee40-1.html