Beveiligingsadvies

CVE-2019-16261

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-09-12 14:07:11
Laatst bijgewerkt 2025-03-21 13:56:28
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Tripp Lite PDUMH15AT 12.04.0053 and SU750XL 12.04.0052 devices allow unauthenticated POST requests to the /Forms/ directory, as demonstrated by changing the manager or admin password, or shutting off power to an outlet. NOTE: the vendor's position is that a newer firmware version, fixing this vulnerability, had already been released before this vulnerability report about 12.04.0053.