Description
A vulnerability was found in Acrel Environmental Monitoring Cloud Platform 1.1.0. This issue affects some unknown processing. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acrel | Environmental Monitoring Cloud Platform | 1.1.0 | — |
References
- VDB-352324 | Acrel Environmental Monitoring Cloud Platform unrestricted upload vdb-entry
- VDB-352324 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- Submit #774423 | Acrel Co., Ltd 安科瑞环保用电监管云平台 1.1.0 Unauthorized File Upload Vulnerability third-party-advisory
- https://github.com/LTX-GOD/Mycve/blob/main/Acrel_Co_Ltd.md broken-link exploit