Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which can result in data theft and remote code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IOBit IOTransfer 访问控制错误漏洞
Vulnerability Description
IOBit IOTransfer是IOBit公司的一个易于使用的 iOS 文件传输工具、手机清洁器以及视频下载器。可轻松传输/同步/移动/备份照片、音乐、视频、联系人等。 IOBit IOTransfer 4.3.1.1561版本存在访问控制错误漏洞，该漏洞源于未经身份验证的攻击者可以向 Airserv 发送 GET 和 POST 请求，并获得对受害者端点上整个文件系统（具有管理员权限）的任意读/写访问权限，攻击者利用该漏洞可以盗取数据和执行远程代码。
CVSS Information
N/A
Vulnerability Type
N/A