Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-20501

Опубликовано: 21 апр. 2021
Источник: nvd
CVSS3: 5.9
CVSS3: 8.2
CVSS2: 6.4
EPSS Низкий

Описание

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:ibm:i:7.1:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:7.2:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.00454
Низкий

5.9 Medium

CVSS3

8.2 High

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 8.2
github
больше 3 лет назад

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056.

EPSS

Процентиль: 63%
0.00454
Низкий

5.9 Medium

CVSS3

8.2 High

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo