CVE-2023-32752

CRITICAL 9.8CVE-2023-32752 · Published 16/06/2023 · updated 17/06/2026

In short

CVE-2023-32752 is a CRITICAL (CVSS 9.8) vulnerability affecting instantqos (l7-networks), instantscan (l7-networks).
Chance of exploitation in the next 30 days (EPSS): 0.94%, higher than 61.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
instantqos l7-networks	`= iq-8000`	No fix yet
instantscan l7-networks	`= is-8000`	No fix yet

Description

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

References

twcert.org.tw/en/cp-139-7189-5995e-2.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free