9.8
CVE-2021-26473
- EPSS 1.76%
- Veröffentlicht 08.06.2021 19:15:08
- Zuletzt bearbeitet 21.11.2024 05:56:25
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginUnauthenticated arbitrary file upload and command execution in Vembu products
In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitrary files in the context of the web server process. These files can then be executed remotely by calling the file via the web server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Vembu ≫ Offsite Dr Version < 4.2.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.76% | 0.75 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| cve@mitre.org | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
https://csirt.divd.nl/2021/05/11/Vembu-zero-days/
https://csirt.divd.nl/cases/DIVD-2020-00011/
https://www.wbsec.nl/vembu
https://csirt.divd.nl/cves/CVE-2021-26473/