Beveiligingsadvies

CVE-2021-41291

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-09-30 10:40:51
Laatst bijgewerkt 2024-09-16 23:36:07
Toegewezen door twcert
CVSS-score 7.5
Status PUBLISHED

Beschrijving

ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device.