Beveiligingsadvies

CVE-2025-23237

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-22 05:50:14
Laatst bijgewerkt 2025-02-12 20:41:22
Toegewezen door jpcert
CVSS-score 6.6
Status PUBLISHED

Beschrijving

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If a user logs in to CLI of the affected product, an arbitrary OS command may be executed.