CVE-2024-26367

Name of the Vulnerable Software and Affected Versions Evertz microsystems MViP-II Firmware version 8.6.5 Evertz microsystems XPS-EDGE-* Build 1467 Evertz microsystems evEDGE-EO-* Build 0029 Evertz microsystems MMA10G-* Build 0498 Evertz microsystems 570IPG-X19-10G Build 0691

Description The issue allows a remote attacker to execute arbitrary code via a crafted payload to the login parameters. This can lead to unauthorized access.

Recommendations For Evertz microsystems MViP-II Firmware version 8.6.5, update the firmware to a version that includes the fix for this issue. For Evertz microsystems XPS-EDGE-* Build 1467, update the build to a version that includes the fix for this issue. For Evertz microsystems evEDGE-EO-* Build 0029, update the build to a version that includes the fix for this issue. For Evertz microsystems MMA10G-* Build 0498, update the build to a version that includes the fix for this issue. For Evertz microsystems 570IPG-X19-10G Build 0691, update the build to a version that includes the fix for this issue. As a temporary workaround, consider validating input for the login parameters to minimize the risk of exploitation.