CVE-2024-3521

Summary

CVE-2024-3521 is a critical vulnerability impacting the Byzoro Smart S80 Management Platform up to version 20240317. An unknown functionality of the file /useratte/userattestation.php is the source of the issue. Attackers can exploit this vulnerability by manipulating the argument web_img, resulting in unrestricted upload. This exploit can be executed remotely, and the identifier for this vulnerability is VDB-259892. Notably, the vendor was contacted about the disclosure but failed to respond. This vulnerability is now publicly known, and its exploitation is a concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.