Security Advisory

CVE-2021-22697

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-25 17:09:26
Last updated 2024-08-03 18:51:07
Assigner schneider
State PUBLISHED

Description

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.