CVE-2026-3025: ShuoRen Smart Heating Integrated Management Platform

Описание

Оригинално описание

A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0. Affected by this vulnerability is an unknown functionality of the file /MP/Service/Webservice/ExampleNodeService.asmx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Засегнати продукти

• ShuoRen Smart Heating Integrated Management Platform: 1.0.0

Вид слабост

• CWE-434 Неограничено качване на файл от опасен тип
• CWE-284 Неправилен контрол на достъпа

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-3025
• https://nvd.nist.gov/vuln/detail/CVE-2026-3025
• https://vuldb.com/?id.347381
• https://vuldb.com/?ctiid.347381
• https://vuldb.com/?submit.756376