CVE-2023-6574 is a critical unrestricted file upload vulnerability affecting Byzoro Smart S20 devices up to firmware version 20231120. An authenticated attacker can exploit a flaw in the /sysmanage/updateos.php component via an HTTP POST request to upload arbitrary files. This remote vulnerability carries a CVSS score of 8.8 (High), indicating high impact on confidentiality, integrity, and availability. While a public exploit exists, there is no evidence of active exploitation, and it has received minimal community attention or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2023-11-20CPE matchmatch criteria | cpe:2.3:o:byzoro:smart_s20_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.