CVE-2024-0643
Cires21
CVE-2024-0643: Unrestricted file upload in C21 Live Encoder and Live Mosaic v5.3 can lead to full system compromise. A remote attacker can upload any file type, bypassing security measures.
CVE-2024-0643 is a critical vulnerability allowing attackers to upload malicious files to C21 Live Encoder and Live Mosaic systems. The absence of file extension restrictions means that harmful scripts, executables, or other dangerous file types can be uploaded and executed. With a SOCRadar Vulnerability Risk Score (SVRS) of 84, this vulnerability is classified as critical, demanding immediate attention and remediation. The high SVRS indicates significant real-world threat activity and potential for exploitation based on threat intelligence analysis. This unrestricted upload can result in complete system takeover, data theft, and other severe consequences. Addressing this issue is paramount to protecting affected systems.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.