7.1
CVE-2021-42257
- EPSS 0.12%
- Veröffentlicht 11.10.2021 20:15:07
- Zuletzt bearbeitet 21.11.2024 06:27:28
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Logincheck_smart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path (the /dev/bus substring and a number), aka an unanchored regular expression.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Check Smart Project ≫ Check Smart Version < 6.9.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.323 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
| nvd@nist.gov | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.