CVE-2008-0175 Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extensi...
HighCVSS 7.5
EPSS 15.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ge fanuc proficy real-time information portal | <= 2.6 | No fix listed |
References
- 28678 third-party-advisory vendor-advisory
- 3591 third-party-advisory
- support.gefanuc.com
- VU#339345 third-party-advisory us-government-resource
- 20080125 C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution mailing-list
- 20080129 Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution mailing-list
- 27446 vdb-entry
- 1019274 vdb-entry
- ADV-2008-0307 vdb-entry