7.5

CVE-2021-20705

Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote file upload via network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nec ≫ Clusterpro X SwPlatform windows Version >= 1.0 <= 4.3
Nec ≫ Clusterpro X Singleserversafe SwPlatform windows Version >= 1.0 <= 4.3
Nec ≫ Expresscluster X SwPlatform windows Version >= 1.0 <= 4.3
Nec ≫ Expresscluster X Singleserversafe SwPlatform windows Version >= 1.0 <= 4.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.08% 0.607
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://jpn.nec.com/security-info/secinfo/nv21-015_en.html