Security Advisory

CVE-2022-31210

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-07-17 22:40:18
Last updated 2024-08-03 07:11:39
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains hardcoded credentials to the web application. Because these accounts cannot be deactivated or have their passwords changed, they are considered to be backdoor accounts.