RULE(RULE ID:338177)

Rule General Information
Release Date: 2024-06-25
Rule Name: SecGate3600 Firewall obj_area_import_save Arbitrary File Upload Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: SecGate3600 is a security gateway product of legendsec Information Technology Co., LTD. SecGate3600 has the obj_area_import_save arbitrary file upload vulnerability. Attackers can upload malicious backdoor files by constructing special request packages to obtain server permissions.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.