CVE-2023-3623

Summary

CVE-2023-3623 is a critical vulnerability affecting the Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to version 20230704. This issue lies within the unknown functionality of the component Duty Module's /Duty/AjaxHandle/UploadHandler.ashx file, specifically the Filedata argument. Manipulation of Filedata allows for unrestricted file uploads, which can be exploited remotely. The exploit for this vulnerability has been disclosed to the public, increasing the risk of attacks. The identifier for this issue is VDB-233576, and despite early contact, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.