Security Advisory

CVE-2021-26472

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-06-08 18:37:29

Last updated 2024-09-16 22:08:25

Assigner mitre

CVSS score 10.0

State PUBLISHED

Description

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges.

← Browse all CVEs View on cve.org ↗