CyberRota Analysis
AI-GeneratedThe Tencent Mass Service Engine in Cluster is vulnerable to remote, unauthenticated attacks that allow an attacker to exploit crafted POST requests to gain root access on affected devices. This critical vulnerability enables the execution of arbitrary code through webshells, posing a significant risk to system integrity and confidentiality. Organizations utilizing this service should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root.