CVE-2024-3444

A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=net_pro_keyword_import_save. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259701 was assigned to this vulnerability.

• CWE-434

• https://github.com/h0e4a0r1t/lLGcmVjGkR/blob/main/Wangshen%20SecGata%203600%20Firewall%20net_pro_keyword_import_save%20arbitrary%20file%20upload%20vulnerability.pdf
• https://vuldb.com/?ctiid.259701
• https://vuldb.com/?id.259701
• https://vuldb.com/?submit.312293
• https://github.com/h0e4a0r1t/lLGcmVjGkR/blob/main/Wangshen%20SecGata%203600%20Firewall%20net_pro_keyword_import_save%20arbitrary%20file%20upload%20vulnerability.pdf
• https://vuldb.com/?ctiid.259701
• https://vuldb.com/?id.259701
• https://vuldb.com/?submit.312293

Published

Apr 8, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34434Incorrect Authorization vulnerability in realmag777 WordPres…6.5
• CVE-2024-34435Missing Authorization vulnerability in CodeRevolution Aiomat…8.8
• CVE-2024-34436Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-34437Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2024-34438Missing Authorization vulnerability in Anssi Laitila Shared …5.3
• CVE-2024-34439Cross-Site Request Forgery (CSRF) vulnerability in divSpot D…4.3
• CVE-2024-34440Unrestricted Upload of File with Dangerous Type vulnerabilit…7.2
• CVE-2024-34441Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-34442Missing Authorization vulnerability in weDevs weDocs.This is…5.3
• CVE-2024-34443Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-34444Missing Authorization vulnerability in ThemePunch OHG Slider…8.8
• CVE-2024-34445Improper Neutralization of Input During Web Page Generation …5.4