Vulnerability · Published Dec 10, 2024 · Assigned by SEC-VLab
CVE-2024-47946OS Command Execution through Arbitrary File Upload
High 7.2
In plain English
A high-severity unrestricted file upload in Scan2Net from Image Access GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).
Official description
If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content can be uploaded as desktop backgrounds or lock screens. After the upload, the PHP script is available in the web root. The PHP code executes once the uploaded file is accessed. This allows the execution of arbitrary PHP code and OS commands on the device as "www-data".
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Image Access GmbH | Scan2Net | 0 – before 7.42 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H