| Package | Affected versions | Patched versions |
|---|---|---|
| sd-wan | ≥ 8.6.0.4-2.2.0.0, ≤ 8.6.0.4-2.2.0.7≥ 8.7.0.0-2.3.0.0, ≤ 8.7.0.0-2.3.0.9 |
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free