Executive Summary

This vulnerability exists in the ugw-restoreinfo method, which allows a remote attacker who has user privileges to delete arbitrary local files. The root cause is insufficient validation of user-controlled input, meaning the method does not properly check or restrict the input provided by the user, enabling malicious actions.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized deletion of local files by an attacker with user privileges. This can result in loss of important data, disruption of services, and potential system instability or denial of service.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in the ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

This unauthorized deletion of files could lead to data loss or tampering, which may impact the integrity and availability of sensitive information.

Such impacts could potentially affect compliance with standards and regulations like GDPR and HIPAA, which require protection of data integrity and availability.

However, there is no explicit information provided in the available resources about the direct effects of this vulnerability on compliance with these regulations.

Useful 0 Not Useful 0