Security Advisory

CVE-2021-33527

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-02 10:24:31
Last updated 2024-09-16 17:42:36
Assigner CERTVDE
State PUBLISHED

Description

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITYSYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.