Description (CNA)
ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including Base64 encoded 'support' credentials, leading to administrative access of the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exagrid.com/exagrid-products/resources/
- https://www.inquisitllc.com/exagrid-directory-traversal-vulnerability-to-support-credential-extraction/
ADP enrichment
No English description supplied.