6.8

CVE-2021-38646

Warnung

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ 365 Apps Version - SwEdition enterprise
Microsoft ≫ Office Version 2013 Update sp1 SwEdition -
Microsoft ≫ Office Version 2013 Update sp1 SwEdition rt
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x64
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x86
Microsoft ≫ Office 2019 Version -

28.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Schwachstelle

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.99% 0.942
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Microsoft 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38646
Patch
Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38646
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38646
US Government Resource