Description
The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Optigo Networks | ONS-S8 Spectra Aggregation Switch | ≤ 1.3.7 | — |
Advisories 1
- ICSA-24-275-01 Optigo Networks ONS-S8 - Spectra Aggregation Switch CISA ICS & IT advisories · Oct 1, 2024