An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.
Thanks to a Researcher at Tenable for finding and reporting.
Fixed in version 6.4.1.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: hackerone
Published: 2023-08-10T19:07:38.628Z
Updated: 2023-08-10T19:07:38.628Z
Reserved: 2023-05-10T01:00:12.524Z
Link: CVE-2023-32560
JSON object: View
NVD Information
Status : Modified
Published: 2023-08-10T20:15:10.200
Modified: 2023-09-18T16:15:45.240
Link: CVE-2023-32560
JSON object: View
Redhat Information
No data.
CWE