SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.
SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.
Sentiment · trusted sources
synthesissevere-fallout-0.80
CISA and security press condemn SerComm's CRLF injection vulnerability as critical and widely exploited, with no evidence of praise or mitigation in provided sources.
“SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.”