Beveiligingsadvies

CVE-2023-40460

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-04 22:50:04

Laatst bijgewerkt 2026-02-25 17:20:06

Toegewezen door SWI

CVSS-score 7.1

Status PUBLISHED

Beschrijving

The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticated user to perform client-side script execution within ACEManager, altering the device functionality until the device is restarted.

← Alle CVE's bekijken Bekijk op cve.org ↗