[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-27 04:12 UTC
Importiert: 2026-09-29 06:35 UTC
Quelle-ID: full_disc
uid_hash: a0131c4a160df5cb4d66babacf954f6d0e07b592cc9bd603352abb96b5ba1b72

Full Disclosure

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Server

Technology (Legrand group) PRO3X series intelligent rack PDUs, firmware

spdu-pro3x-030600 build 46640 (ARM 32-bit uClibc Linux).

Type: authenticated listener program override leading to root command execution

(CWE-78, CWE-269; a separate hard-coded factory credential is reported as

CWE-798). PRO3X PDUs run port_mux, an inetd-style launcher that starts every

protocol...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss