CVE-2024-1253: Byzoro Smart S40 Management Platform · Unrestricted Upload
Affects Byzoro Smart S40 Management PlatformSource CVE Database V5
Not known to be exploited · CVSS 4.7 Medium.
Data as of 26 Oct 2026, 06:26 UTC
- EPSS
- 1.6% chance of exploitation in 30 days – higher than 76% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LExploitation evidence
Disclosed: evidence found.
CVE published 6 Feb 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
AI-suggested
Given the absence of official patches, European organizations should implement compensating controls immediately. These include: 1) Restricting access to the Smart S40 Management Platform to trusted networks and users only, minimizing exposure to potential attackers. 2) Enforcing strict access controls and monitoring privileged accounts to prevent unauthorized use or credential compromise. 3) Implementing application-layer firewalls or web application firewalls (WAFs) to detect and block malicious file upload attempts targeting the vulnerable endpoint. 4) Conducting regular audits and monitoring of uploaded files for suspicious content or unauthorized changes. 5) If possible, disabling or restricting the Import Handler functionality until a patch is available. 6) Employing network segmentation to isolate the management platform from critical systems. 7) Preparing incident response plans specifically for potential exploitation scenarios involving file upload abuse. 8) Staying alert for vendor updates or community patches and applying them promptly once available.
Description
A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument file_upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252992. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.