CVE-2025-24350

CVE-2025-24350 affects the web application’s Certificates and Keys functionality in ctrlX OS. It allows a remote authenticated (low-priv) attacker to write arbitrary certificates to arbitrary file-system paths via a crafted HTTP request. The provided connected documents reiterate this description...

CVE-2025-24350

A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to write arbitrary certificates in arbitrary file system paths via a crafted HTTP request...