CVE-2023-4121 - Byzoro Smart S85F Management Platform unrestricted upload

Back Back to CVE browser

CRITICAL

Byzoro Smart S85F Management Platform unrestricted upload

Published Aug 3, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 2.51%

Description

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. Affected is an unknown function. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235968. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Byzoro Product Smart S85F Management Platform Default
unknown
Affected
- 20230722

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Byzoro	Smart S85F Management Platform	unknown	Affected 20230722

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54007
Advisory
https://github.com/torres14852/cve/blob/main/upload.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.235968
signaturepermissions-requiredPermissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?id.235968
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.185755
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54007		Advisory
https://github.com/torres14852/cve/blob/main/upload.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.235968		signaturepermissions-requiredPermissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?id.235968		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.185755		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Aug 3, 2023

Updated Aug 2, 2024

Reserved Aug 2, 2023

Link CVE-2023-4121

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-4121

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Aug 3, 2023

Updated Aug 2, 2024

Link EUVD-2023-54007

GitHub

No data