Foundry Networks ServerIron switches do not decode URIs when applying url-map rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Serveriron | Foundrynet | 5.1.10t12 (including) | 5.1.10t12 (including) |
| Serveriron | Foundrynet | 6.0 (including) | 6.0 (including) |
| Serveriron | Foundrynet | 7.1.09 (including) | 7.1.09 (including) |
| Serveriron | Foundrynet | 400 (including) | 400 (including) |
| Serveriron | Foundrynet | 800 (including) | 800 (including) |
| Serveriron | Foundrynet | xl (including) | xl (including) |
| Serveriron | Foundrynet | xl_g (including) | xl_g (including) |