The vulnerability CVE-2024-49324 in Sovratec Case Management allows unauthenticated attackers to upload files of dangerous types without restriction. This can be exploited to upload a web shell, granting remote code execution capabilities on the affected server. The issue affects all versions up to and including 1.0.0. The CVSS 3.1 base score is 10.0, reflecting critical impact and ease of exploitation over the network without any privileges or user interaction.

Successful exploitation results in complete compromise of the affected system, including full confidentiality, integrity, and availability loss. An attacker can execute arbitrary code remotely by uploading a web shell, potentially leading to data theft, system manipulation, or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload functionality, implement strict file type validation, and consider deploying web application firewalls or other controls to detect and block web shell uploads.