Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-41925

Optigo Networks ONS-S8 Spectra Aggregation Switch PHP Remote File Inclusion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Optigo Networks ONS-S8 Spectra Aggregation Switch

Default version status: unaffected

  • 0 to ≤ 1.3.7affected

References