Back to CVE Browser

CVE-2023-3049

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0440%

EPSS Percentile10.46th

PublishedJun 13, 2023

Last ModifiedMay 22, 2026

Vulnerability Description

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.

Affected Platforms (CPE)

💻

Tmtmakine

Lockcell Firmware

< 15.0

References & Advisories

🔗 https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0345

🔗 https://www.usom.gov.tr/bildirim/tr-23-0345

🔗 https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/

🔗 https://www.usom.gov.tr/bildirim/tr-23-0345

Related Vulnerabilities

CVE-2023-20649.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace all...

CVE-2023-27139.8

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-comme...

CVE-2023-343629.8

MOVEit Transfer SQL Injection vulnerability allows unauthenticated attackers to gain unauthorized access to MOVEit Transfer's data...

CVE-2023-350649.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQ...