Security Advisory

CVE-2021-23242

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-07 20:19:22
Last updated 2024-08-03 19:05:54
Assigner mitre
State PUBLISHED

Description

MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.