Security Advisory

CVE-2025-24350

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-30 11:45:52

Last updated 2025-04-30 14:23:43

Assigner bosch

State PUBLISHED

Description

A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary certificates in arbitrary file system paths via a crafted HTTP request.

← Browse all CVEs View on cve.org ↗