CVE-2023-5493

Summary

CVE-2023-5493 is a newly disclosed critical vulnerability affecting the Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to version 20230928. The vulnerability lies in an unknown functionality of the file /useratte/web.php, which can be exploited through manipulation of the argument file_upload. This leads to unrestricted upload capabilities and allows remote attacks. The exploit for this vulnerability has been made public, increasing the risk to organizations using the affected software. The identifier VDB-241645 has been assigned to this vulnerability, and unfortunately, the vendor has not responded to disclosure efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.