8.5

CVE-2021-44750

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F-secure ≫ Client Security Version-
   Microsoft ≫ Windows Version-
F-secure ≫ Countercept Version-
   Microsoft ≫ Windows Version-
F-secure ≫ Elements Version-
   Microsoft ≫ Windows Version-
F-secure ≫ Email And Server Security Version-
   Microsoft ≫ Windows Version-
F-secure ≫ Server Security Version-
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.442
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
cve-notifications-us@f-secure.com 6.4 0.5 5.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H