Security Advisory

CVE-2017-14853

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-03 19:00:05
Last updated 2024-08-05 19:42:22
Assigner mitre
State PUBLISHED

Description

The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.