Beveiligingsadvies

CVE-2021-41294

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-09-30 10:40:55
Laatst bijgewerkt 2024-09-17 03:53:41
Toegewezen door twcert
CVSS-score 9.1
Status PUBLISHED

Beschrijving

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario.