CVE Feed

    Dashboard / CVE / CVE-2024-25832

    CVE-2024-25832

    F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.

    Published:Feb 28, 2024
    Last Modified:Mar 27, 2025
    EPS:Feb 28, 2024
    EPSS Score:0.19119
    CVSS Score:8.8

    Affected Products

    Vendor
    F-logic
    Product
    Datacube3

    Exploits

    https://neroteam.com/blog/f-logic-datacube3-vulnerability-reporthttps://neroteam.com/blog/f-logic-datacube3-vulnerability-reporthttps://www.exploit-db.com/exploits/51868https://github.com/0xNslabs/CVE-2024-25832-PoC

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

    Related CVEs

    CVE-2024-7066 (CVSS 6.9) — A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnera…
    CVE-2024-34854 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`…
    CVE-2024-34852 (CVSS 6.3) — F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execut…
    CVE-2024-31750 (CVSS 9.8) — SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive informatio…
    CVE-2024-25831 (CVSS 5.4) — F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to impro…
    CVE-2024-25833 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated ma…
    CVE-2024-25830 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restricti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High