Skip to content
OpenAdvisories
Unscored CVE-2022-35239 EUVD-2022-38131GHSA-3vpf-2pmh-fq33

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an i…

Published Aug 16, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Description

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated attacker uploads a specially crafted PHP file.

Affected products

VendorProductAffectedFixed
CONTEC SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier —

References