Security Advisory
CVE-2023-21422
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.