Description
The
iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this vulnerability to delete arbitrary system files or directories, resulting in data destruction or service disruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IEI Integration | iVEC TANK-XM811 | < 1.0.4 | 1.0.4 |
References
- https://www.twcert.org.tw/tw/cp-132-10969-4c4e2-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html third-party-advisory