8.8

CVE-2021-37911

EPSS 0.58%
Veröffentlicht 30.08.2021 15:15:07
Zuletzt bearbeitet 21.11.2024 06:16:02
CVE-Watchlists
Login
Unerledigt
Login

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Benq ≫ Eh600 Firmware Version <= 01.00.30.00

Benq ≫ Eh600 Version-

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.58%	0.433

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.3	6.5	10	AV:A/AC:L/Au:N/C:C/I:C/A:C
Cert TW	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://www.twcert.org.tw/tw/cp-132-5047-7ef35-1.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-37911

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-37911

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-37911

EUVD