The vulnerability CVE-2024-51792 affects the Dang Ngoc Binh Audio Record software (version 1.0 and earlier) and allows an attacker to upload files without proper restrictions on file types. This can be exploited to upload a web shell, granting remote code execution capabilities on the affected web server. The CVSS 3.1 base score is 10.0, reflecting critical impact across confidentiality, integrity, and availability with an attack vector over the network and no required privileges or user interaction. No patch or vendor advisory has been provided to date.

Successful exploitation of this vulnerability can lead to complete compromise of the affected web server, including unauthorized remote code execution, data theft, data modification, and service disruption. The attacker can gain full control over the system hosting the vulnerable application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the upload functionality, implement file type validation and filtering at the web server or application firewall level, and monitor for suspicious upload activity. Avoid exposing the vulnerable application to untrusted networks.