CVE-2017-12929: Tecnovision Dlx Spot PLAYER4

High severity, CVSS 8.8. EPSS: 10.1% chance of exploitation in the next 30 days.

Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.

Affected products

• Tecnovision Dlx Spot PLAYER4: affected versions not specified

Published 2017-09-21. Last modified 2026-06-17.