CVE-2021-43339

Name of the Vulnerable Software and Affected Versions Ericsson Network Location versions prior to 2021-07-31

Description The issue allows an authenticated attacker to inject commands via the file name in the export functionality. This could potentially be used to create a new admin user.

Recommendations For versions prior to 2021-07-31, consider restricting access to the export functionality until a fix is available. As a temporary workaround, avoid using the file name parameter in the export functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.