The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netcache | Network_appliance | c700 (including) | c700 (including) |
| Netcache | Network_appliance | c1100 (including) | c1100 (including) |
| Netcache | Network_appliance | c3100 (including) | c3100 (including) |
| Netcache | Network_appliance | c6100 (including) | c6100 (including) |