CVE-2020-17387: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Marvell QConvergeConsole Remote Code Execution Vulnerability (CNVD-2020-46347)

Marvell QConvergeConsole QCC is a unified adapter management software across data centers from Marvell. The software is primarily used for Ethernet and Fibre Channel adapter management, among other things. A remote code execution vulnerability exists in the writeObjectToConfigFile method of the...

PT-2020-14938

Name of the Vulnerable Software and Affected Versions Marvell QConvergeConsole version 5.5.0.64 Description This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can ...