THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-7309 — A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to uplo

[NVD] CVE-2023-7309 — A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to uplo

lownvdPublished 2025-08-27

CVE-2023-7309 CVSS: None Published: 2025-08-27T22:15:32.897

A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary files to the server via crafted SOAP requests

Indicators of compromise

CVE-2023-7309cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-7309