Arbitrary file upload in Elvaco M-Bus Metering Gateway Cme3100

CVE-2024-49398

The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code.

Vulnerability class: Unrestricted File Upload

EPSS: 0.005 (41.2th percentile) — read the EPSS interpretation.