Vulnerability CVE-2024-3444
Published: 2024-04-08

Description:
A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=net_pro_keyword_import_save. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259701 was assigned to this vulnerability.

Type:

CWE-434

 (Unrestricted Upload of File with Dangerous Type)

 References:
https://vuldb.com/?id.259701
https://vuldb.com/?ctiid.259701
https://vuldb.com/?submit.312293
https://github.com/h0e4a0r1t/lLGcmVjGkR/blob/main/Wangshen%20SecGata%203600%20Firewall%20net_pro_keyword_import_save%20arbitrary%20file%20upload%20vulnerability.pdf
Copyright 2026, cxsecurity.com

 

Back to Top