Description
Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows attackers to execute arbitrary Windows binaries by manipulating the NO_LIST_EXE_PATH configuration parameter. Attackers can bypass authentication through the /cps/ endpoint and modify server configuration, including changing admin passwords and executing system commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Selea | Selea CarPlateServer (CPS) | 4.0.1.6 | — |
References
- ExploitDB-49452 exploit
- Vendor Homepage product
- Zero Science Lab Disclosure (ZSL-2021-5622) third-party-advisory
- VulnCheck Advisory: Selea CarPlateServer 4.0.1.6 Remote Program Execution via Configuration Endpoint third-party-advisory