#VU11186 Arbitrary file upload in Webviewer - CVE-2017-16524

Vulnerability identifier: #VU11186

Vulnerability risk: High

CVSSv4.0: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2017-16524

CWE-ID: CWE-434

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
Webviewer
Mobile applications / Apps for mobile phones

Vendor: Samsung

Description
The vulnerability allows a remote authenticated attacker to upload and execute arbitrary code on the target system.

The weakness exists in the network_ssl_upload.php code due to improper security restrictions on file uploads. A remote attacker can upload a specially crafted file with a .php extension and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

Mitigation
Cybersecurity is currently unaware of any solutions addressing the vulnerability.

Vulnerable software versions

Webviewer: 1.0.0.193

---

External links
https://github.com/realistic-security/CVE-2017-16524

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, a fully functional exploit for this vulnerability is available.