PT-2021-7317

CVE-2021-36306

·

Published

2021-11-19

·

Updated

2021-11-23

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Networking OS10 versions prior to October 2021
Description The issue is related to an authentication bypass vulnerability in the implementation of the RESTCONF API in the Networking OS10. This vulnerability could allow a remote unauthenticated attacker to gain access and perform actions on the affected system.
Recommendations For versions prior to October 2021, consider disabling the RESTCONF API until a patch is available to prevent exploitation of the authentication bypass vulnerability. Restrict access to the system to minimize the risk of unauthorized access.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾