CVE-2020-17485: Malicious File Upload

Published Dec 16, 2023

Updated

A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources

Affected Software

2 affected components

Uffizio All versions of GPS Tracker software

Uffizio GPS Tracker

Event History

Dec 16, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

May 9, 2024

Data Sourced

via ICS·10:29 PM

SeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-21-287-02

Frequently Asked Questions

What is the severity of CVE-2020-17485?

CVE-2020-17485 is rated as a Critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2020-17485?

To fix CVE-2020-17485, ensure that you update to the latest version of Uffizio GPS Tracker software that addresses this vulnerability.

Who is affected by CVE-2020-17485?

CVE-2020-17485 affects all versions of Uffizio's GPS Tracker software.

What type of vulnerability is CVE-2020-17485?

CVE-2020-17485 is a Remote Code Execution vulnerability allowing attackers to upload and execute malicious shells on the server.

What can an attacker do with CVE-2020-17485?

An attacker exploiting CVE-2020-17485 can run arbitrary commands, access system files, and browse local resources.