Intrusion PreventionDolusoft.SaveUploadedHotspotLogoFile.Arbitrary.File.Upload
Description
This indicates an attack attempt to exploit an Arbitrary File Upload Vulnerability in Dolusoft products.
The vulnerability is due to insufficient validation of user inputs. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in arbitrary code execution.
Affected Products
SonLogger before 6.4.1
FortiLogger before 5.2.0
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.dolusoft.com/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2024-04-25 | 27.775 | Name:SonLogger. SaveUploadedHotspotLogoFile. Arbitrary. File. Upload:Dolusoft. SaveUploadedHotspotLogoFile. Arbitrary. File. Upload |
| 2024-04-25 | 27.775 | Default_action:pass:drop |
| 2024-04-17 | 27.770 |
| ID | 55486 |
| Created | Apr 09, 2024 |
| Updated | Apr 24, 2024 |
| Risk |
|
| CVE ID | CVE-2021-27964 CVE-2021-3378 |
| Exploit Prediction Score | 57.64% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | ASP_app |