Security Advisory

CVE-2025-64126

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-11-26 17:47:05

Last updated 2025-12-03 16:24:46

Assigner icscert

CVSS score 10.0

State PUBLISHED

Description

An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary commands.

← Browse all CVEs View on cve.org ↗