Security Advisory

CVE-2017-14003

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-10-11 19:00:00
Last updated 2024-08-05 19:13:41
Assigner icscert
State PUBLISHED

Description

An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and prior versions. An improper authentication vulnerability has been identified, which, if exploited, would allow an attacker with the same IP address to bypass authentication by accessing a specific uniform resource locator.