Description
Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Akuvox | E11 | All | — |
Advisories 1
- ICSA-23-068-01 Akuvox E11 CISA ICS & IT advisories · Mar 29, 2023