CVE-2021-44159

4MOSAn GCB Doctor - Unrestricted Upload of File

State: Published
Severity: 9.8 Critical
Published: Dec 20, 2021
Updated: Sep 17, 2024
Reserved: Nov 23, 2021

Description

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	twcert

Weaknesses

CWE-434 Unrestricted Upload of File with Dangerous Type

Affected Products

Product	Versions
GCB Doctor4MOSAn	20210811(2.0) and earlierAffected

References

https://www.twcert.org.tw/tw/cp-132-5395-eee40-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.