CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2021-12-15

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Remote View Pro Firmware (Socomec)

References

• https://f20.be/cves/socomec
• https://www.socomec.com/remote-view-software_en.html