PT-2021-7317
CVE-2021-36306
·
Published
2021-11-19
·
Updated
2021-11-23
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Networking OS10 versions prior to October 2021
Description
The issue is related to an authentication bypass vulnerability in the implementation of the RESTCONF API in the Networking OS10. This vulnerability could allow a remote unauthenticated attacker to gain access and perform actions on the affected system.
Recommendations
For versions prior to October 2021, consider disabling the RESTCONF API until a patch is available to prevent exploitation of the authentication bypass vulnerability. Restrict access to the system to minimize the risk of unauthorized access.
Found an issue in the description? Have something to add? Feel free to write us 👾