RULE(RULE ID:337991)

Rule General Information
Release Date: 2024-05-08
Rule Name: SecGate 3600 Firewall obj_app_upfile Interface Arbitrary File Upload Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: SecGate 3600 is a composite hardware firewall based on status detection packet filtering and application level proxy. The obj_app_upfile interface of the SecGate 3600 firewall has arbitrary file upload vulnerabilities. Unauthorized attackers can upload arbitrary files and obtain server permissions through these vulnerabilities.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.