CVEブラウザに戻る

CVE-2023-3049

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0440%

EPSS Percentile10.46th

Published2023年6月13日

Last Modified2026年5月22日

Vulnerability Description

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.

Affected Platforms (CPE)

💻

Tmtmakine

Lockcell Firmware

< 15.0

References & Advisories

🔗 https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0345

🔗 https://www.usom.gov.tr/bildirim/tr-23-0345

🔗 https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/

🔗 https://www.usom.gov.tr/bildirim/tr-23-0345

関連する脆弱性情報

CVE-2023-20469.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle T...

CVE-2023-30489.8

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass....

CVE-2023-29079.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injectio...

CVE-2023-30509.8

Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privileg...