Skip to content
OpenAdvisories

Vendor

VA MAX

1 known vulnerabilities.

Products

VA MAX 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2019-25671

    VA MAX 8.3.4 Remote Code Execution via changeip.php

    VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter. Attackers can send POST requests to the changeip.php endpoint with mal…

    VA MAX VA MAX