CVE-2024-5050

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published May 17, 2024
Updated: Jun 4, 2024
CWE ID 434

Summary

CVE-2024-5050 is a critical vulnerability affecting Wangshen SecGate 3600 versions up to 20240516. The issue lies within an unspecified part of the /?g=log_import_save file. Attackers can exploit this flaw by manipulating the reqfile argument to initiate an unrestricted upload. This vulnerability, identified as VDB-264747, can be exploited remotely.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share