CVE Catalog
CVE-2023-3049
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk3.71%
88th percentile - higher than 88% of all known CVEs
Summary
CVE-2023-3049 vulnerability in TMT Lockcell allows unrestricted upload of files with dangerous types, leading to command injection.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to execute unauthorized commands on the system.
Recommendation
It is recommended to update Lockcell to version 15 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.