A critical unrestricted file upload vulnerability in the Tiandy Easy7 Integrated Management Platform allows remote, unauthenticated attackers to upload arbitrary files to the target system.

The application fails to properly validate file uploads at the /rest/file/uploadLedImage endpoint, allowing unauthenticated remote attackers to bypass access controls and upload malicious content. This is categorized under CWE-434 (Unrestricted Upload) and CWE-284 (Improper Access Control).

Successful exploitation of this vulnerability could lead to arbitrary code execution or the placement of malicious web shells on the management server. Given the CVSS score of 7.3, this represents a significant risk to the integrity and availability of the platform, potentially granting attackers persistent access to the network infrastructure managed by this software.

Immediate Action: As no official patch is currently available, restrict network access to the management platform to trusted internal IP addresses only. Disable the affected upload functionality if it is not required for core operations.

Proactive Monitoring: Monitor server logs for suspicious POST requests targeting the /rest/file/uploadLedImage endpoint. Inspect the filesystem for unexpected file extensions or unauthorized scripts in the upload directories.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block requests containing suspicious file uploads or attempts to access the vulnerable endpoint from unauthorized sources.

Public Exploit Available: Yes — a published proof-of-concept exists, as documented in the technical write-up referenced by the CVE record.

Due to the lack of a vendor-provided patch and the availability of a public proof-of-concept, this vulnerability poses an immediate threat to any exposed Tiandy Easy7 instances. Security teams must prioritize network-level isolation of this platform until the vendor releases a secure update to address the unrestricted file upload mechanism.