CVE-2023-45599

Summary

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

Affected Software

VendorProductVersion RangeStatus
AiLuximx6 bundle0 < 1.0.7-2affected

Weaknesses

  • CWE-646: CWE-646 Reliance on File Name or Extension of Externally-Supplied File

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References