An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2023-08-10T19:07:38.628Z

Updated: 2024-08-02T15:18:37.790Z

Reserved: 2023-05-10T01:00:12.524Z

Link: CVE-2023-32560

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-10T20:15:10.200

Modified: 2024-11-21T08:03:36.150

Link: CVE-2023-32560

cve-icon Redhat

No data.