Bizerba GT-SoftControl Unauthorized File Upload Vulnerability

A vulnerability exists in Bizerba GT-SoftControl versions prior to 6.0, allowing unauthorized file uploads and potential file overwrites. This issue arises from inadequate validation in the file selection process, which could result in data integrity problems and unauthorized access for authenticated privileged users.

Impact

Exploitation of this vulnerability could lead to arbitrary file uploads, file overwrites, and unauthorized access for privileged users within the GT-SoftControl application.

Remediation

Users are advised to update GT-SoftControl to the latest version. Additionally, prevent unauthorized physical access to the device and disable E-Service to avoid remote access.