CVE-2022-35239 The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files.....
HighCVSS 8.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated attacker uploads a specially crafted PHP file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Contec Co., Ltd. solarview compact | = SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier | No fix listed |
| Contec Co., Ltd. sv-cpt-mc310f firmware | < 7.24 | 7.24 |
| Contec Co., Ltd. sv-cpt-mc310 firmware | < 7.24 | 7.24 |
References
- www.contec.com vendor-advisory
- www.contec.com vendor-advisory
- jvn.jp third-party-advisory