CVE-2023-36252: Ateme Flamingo Xl Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authenticated attacker to execute arbitrary code and cause a denial of service via a the session expiration function.

Affected products

• Ateme Flamingo Xl Firmware: version 3.6.20 only
• Ateme Flamingo Xs Firmware: version 3.6.5 only

Published 2023-06-26. Last modified 2026-06-17.