title: HGiga Inc. OAKlouds - Arbitrary File Upload
description: HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.
problem types: CWE-434: Unrestricted Upload of File with Dangerous Type
affected:
{
vendor: HGIGA INC.
product: HGiga OAKlouds
versions:
version: 2, status: affected
version: 3, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
]
solutions: - Update OAKlouds-layout-2.0 to OAKlouds-layout-2.0-10
- Update OAKlouds-layout-3.0 to OAKlouds-layout-3.0-10