This vulnerability (CWE-434) in Frauscher Sensortechnik FDS 102 version 2.8.0 involves unrestricted upload of files with dangerous types. A high privileged remote attacker can upload a malicious .php file because the product does not properly validate file types during upload. The attacker can then access the uploaded .php file directly via the /uploads/ directory, resulting in arbitrary code execution on the system.

Successful exploitation allows an attacker with high privileges to execute arbitrary code remotely, which could lead to full system compromise. This poses a significant risk to the confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict high privileged user access and monitor file upload functionality closely to prevent unauthorized uploads of executable files.