Smart Park Integrated Management Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:zhejiang_dahua_technology_co.,_ltd.:smart_park_integrated_management_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zhejiang Dahua Technology Co., Ltd. (6542326b-4715-5db5-92e2-15a369f2d823) |
|---|---|
| Product | Smart Park Integrated Management Platform (09ff1e40-8d6f-58ce-8a93-704a5a1ba66b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7309 |
vulnerable | 2026-06-08 06:21:57.523735 |
Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload
A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary files to the server via crafted SOAP requests, including executable JSP payloads. Successful exploitation may lead to remote code execution (RCE) and full compromise of the affected system. The vulnerability is presumed to affect builds released prior to September 2023 and is said to be remediated in newer versions of the product, though the exact affected range remains undefined. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-02-15 UTC.
Published: 2025-08-27T21:23:59.636Z
Updated: 2026-05-25T23:41:24.365Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.