CVE-2023-43742: Improper Authentication

An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrative session via a protection mechanism failure in the authentication function...

CVE-2023-43744: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a patch application function. The Zult...

PT-2023-28962

Name of the Vulnerable Software and Affected Versions Zultys MX-SE versions prior to 17.0.10 patch 17161 Zultys MX-SE II versions prior to 17.0.10 patch 17161 Zultys MX-E versions prior to 17.0.10 patch 17161 Zultys MX-Virtual versions prior to 17.0.10 patch 17161 Zultys MX250 versions prior to...

PT-2023-28964

Name of the Vulnerable Software and Affected Versions Zultys MX-SE versions prior to 17.0.10 patch 17161 Zultys MX-SE II versions prior to 17.0.10 patch 17161 Zultys MX-E versions prior to 17.0.10 patch 17161 Zultys MX-Virtual versions prior to 17.0.10 patch 17161 Zultys MX250 versions prior to...