CVE-2024-11308

TRCore DVC - Use of Hard-coded Cryptographic Key

The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Trcore

Products

Dvc

CVE-2024-11309

TRCore DVC - Arbitrary File Read through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Trcore

Products

Dvc

CVE-2024-11310

TRCore DVC - Arbitrary File Read through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Trcore

Products

Dvc

CVE-2024-11311

TRCore DVC - Arbitrary File Upload through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Trcore

Products

Dvc

CVE-2024-11312

TRCore DVC - Arbitrary File Upload through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Trcore

Products

Dvc

CVE-2024-11313

TRCore DVC - Arbitrary File Upload through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Trcore

Products

Dvc

CVE-2024-11314

TRCore DVC - Arbitrary File Upload through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Trcore

Products

Dvc

CVE-2024-11315

TRCore DVC - Arbitrary File Upload through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Trcore

Products

Dvc