CVE-2023-32752: L7 Networks InstantScan & InstantQoS - Arbitrary File Upload
9.8
CVSS
Description
L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Classification
CVE ID: CVE-2023-32752
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.8
Affected Products
Vendor: L7 Networks
Product: InstantScan
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 22.55% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)