Security Advisory
CVE-2024-6788
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.