Our new Biannual ICS Risk & Vulnerability Report is the most up-to-date look at CVEs disclosed in OT devices.
Check it out!
CWE-434: UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files. Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution, and acquire complete remote control over the machine. Read: “Claroty, Auvesy Coordinate Disclosure on Versiondog Vulnerabilities”