CVE-2020-7569 - AskarLabs CVE Database

CVE-2020-7569

Vendor N/A

Product EcoStruxure Building Operation WebReports V1.9 - V3.1

Weakness CWE-434 · Unrestricted file upload

Published November 19, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code execution.

Key dates

02Disclosure timeline

November 19, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7569 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Related vulnerabilities

04Related CVE

CVE-2024-1875 SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload CVE-2024-50493 WordPress Automatic Translation plugin <= 1.0.4 - Arbitrary File Upload vulnerability CVE-2019-25630 PhreeBooks ERP 5.2.3 Arbitrary File Upload via Image Manager CVE-2023-51421 WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload CVE-2024-13011 WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload