CVE-2023-32752

CVE-2023-32752 is a critical vulnerability affecting L7 Networks InstantScan IS-8000 and InstantQoS IQ-8000 devices, stemming from an unrestricted file upload flaw. An unauthenticated remote attacker can exploit this weakness to upload and execute arbitrary files, leading to arbitrary system command execution or denial of service. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with no user interaction, resulting in complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, its high severity and ease of exploitation warrant immediate attention.