CVE-2023-4817: Unrestricted file upload vulnerability in ICP DAS ET-7060

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-03 · updated 2026-06-17
Weakness: CWE-434

Description

This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire device.

Affected products

ICP DAS ET-7060: 3.00

References

https://www.incibe.es/en/incibe-cert/notices/aviso/unrestricted-file-upload-vulnerability-icp-das-et-7060
https://www.incibe.es/en/incibe-cert/notices/aviso/unrestricted-file-upload-vulnerability-icp-das-et-7060

Get alerted when CVE-2023-4817 or the next vulnerability affects your stack