Beveiligingsadvies

CVE-2021-47745

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-31 18:39:11

Laatst bijgewerkt 2026-03-05 14:31:59

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the firmware upgrade script that allows remote attackers to execute shell commands. Attackers can exploit the 'fw_url' parameter in the ctm-config-upgrade.sh script to inject and execute arbitrary commands with root privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗