CVE-2023-35850: SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or…

PriorityP348high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

0.69%

48.2th percentile

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sun.net	wmpro	—	—
sunnet	wmpro	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.