Description (CNA)
A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| METZ CONNECT / Energy-Controlling EWIO2-M | affected 0.0.0 before 2.2.0 |
| METZ CONNECT / Energy-Controlling EWIO2-M-BM | affected 0.0.0 before 2.2.0 |
| METZ CONNECT / Ethernet-IO EWIO2-BM | affected 0.0.0 before 2.2.0 |
CWE
CWE-434
References
ADP enrichment
No English description supplied.
No references supplied.