Security Advisory

CVE-2020-25353

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-20 18:10:49
Last updated 2024-08-04 15:33:05
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticated attackers to open a connection to the machine via the deviceIpAddr and connPort parameters.