description: A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code execution.
problem types: CWE-434: Unrestricted Upload of File with Dangerous Type
affected:
{
product: EcoStruxure Building Operation WebReports V1.9 - V3.1
vendor: n/a
versions:
status: affected, version: EcoStruxure Building Operation WebReports V1.9 - V3.1
}