Description (CNA)
A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AiLux / imx6 bundle | affected 0 before 1.0.7-2 |
CWE
CWE-646
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.