CVE-2021-33214

Опубликовано: 09 июл. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 6

EPSS Низкий

Описание

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation.

Ссылки

https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4
Vendor Advisory
https://labs.bishopfox.com/advisories
Third Party Advisory
https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4
Exploit
Third Party Advisory
https://www.ewon.biz/about-us/security
Vendor Advisory
https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher
Vendor Advisory
https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4
Vendor Advisory
https://labs.bishopfox.com/advisories
Third Party Advisory
https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4
Exploit
Third Party Advisory
https://www.ewon.biz/about-us/security
Vendor Advisory
https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hms-networks:ecatcher:*:*:*:*:*:*:*:*

Версия до 6.6.4 (включая)

EPSS

Процентиль: 32%

0.00126

Низкий

6.1 Medium

CVSS3

6 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

GHSA-36r3-g8xj-hmh4

github

больше 3 лет назад