TCPWave DDI Remote Code Execution Vulnerability via Unrestricted File Upload and Path Traversal
Vulnerability
A remote code execution vulnerability has been identified in TCPWave DDI version 11.34P1C2. This issue arises from an unrestricted file upload feature that can be exploited in conjunction with path traversal, allowing unauthorized execution of code on the server.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected server.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
0.0threat
0.1urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.