CVE-2023-5488

Summary

CVE-2023-5488 is a critical vulnerability affecting the Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to September 2023. This issue lies within an unknown functionality of the file /sysmanage/updatelib.php, where manipulation of the argument file_upload results in an unrestricted upload. The exploit, which has been disclosed to the public, can be launched remotely, posing a significant risk. Despite early contact, the vendor has not responded to the disclosure. The identifier for this vulnerability is VDB-241640.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.