Security Advisory

CVE-2024-1965

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-28 12:19:55
Last updated 2024-08-02 17:08:02
Assigner INCIBE
State PUBLISHED

Description

Server-Side Request Forgery vulnerability in Haivisions Aviwest Manager and Aviwest Steamhub. This vulnerability could allow an attacker to enumerate internal network configuration without the need for credentials. An attacker could compromise an internal server and retrieve requests sent by other users.