Volerion logoVolerion
Volerion logoVolerion

Browan Communications PrismX MX100 AP Controller Arbitrary File Upload Vulnerability Allowing Web Shell Execution

Vulnerability

An arbitrary file upload vulnerability has been identified in the PrismX MX100 AP controller by Browan Communications, affecting versions prior to 1.03.23.01. This vulnerability allows privileged remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server where the affected application is running.

Remediation

Users are advised to update the firmware to version 1.03.23.01 or later.

Added: Jan 20, 2026, 7:19 AM
Updated: Jan 20, 2026, 7:19 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
3.0
remediation
0.0
relevance
2.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.