Security Advisory
CVE-2020-26510
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution.