Security Advisory

CVE-2023-43849

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-28 18:19:40
Last updated 2025-02-13 15:46:53
Assigner mitre
State PUBLISHED

Description

Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to submit a firmware image via HTTP POST requests. This may result in DoS or remote code execution.