by Kastro
Paper/Archive/CVE-2023-7305

CVE-2023-7305

Guangzhou Smart Software Co., Ltd. SmartBI — SmartBI RMIServlet Unrestricted File Upload RCE

EPSS 0.5%public exploitCVSS 9.2
critical.is priorityof 100
47
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 45.2.452 × 209.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or usage patterns, attackers can send specially crafted requests that cause the application to perform sensitive operations or execute arbitrary code on the host. The vendor released a fix in July 2023 to address the underlying flaw. VulnCheck has observed this vulnerability being exploited in the wild.

Affected

ProductAffectedFixed inSource
SmartBIV8 – < July 2023 updateJuly 2023 updateCNA
SmartBIV9 – < July 2023 updateJuly 2023 updateCNA
SmartBIV10 – < July 2023 updateJuly 2023 updateCNA

Scores by source

VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

patchsmartbi.com.cn/patchinforefavd.aliyun.com/detail?id=AVD-2023-1673292exploitjeyiuwai.pages.dev/posts/1day-%E8%B7%9F%E8%B8%AAsmartbi-rmiservlet-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9Ewriteupvulncheck.com/advisories/smartbi-rmiservlet-unrestricted-file-upload-rce