Security Advisory

CVE-2021-44161

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-29 07:15:16
Last updated 2024-09-16 16:38:54
Assigner twcert
State PUBLISHED

Description

Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication.