CVE-2021-42110

Опубликовано: 08 дек. 2021

Источник: nvd

CVSS3: 7.1

CVSS3: 7.8

CVSS2: 6.2

EPSS Низкий

Описание

An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking.

Ссылки

http://www.popsy.com/Documents/Setups/Setup.Allegro.3.3.4154.2.exe
Patch
Vendor Advisory
https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-42110
https://excellium-services.com/cert-xlm-advisory/CVE-2021-42110
Patch
Third Party Advisory
http://www.popsy.com/Documents/Setups/Setup.Allegro.3.3.4154.2.exe
Patch
Vendor Advisory
https://excellium-services.com/cert-xlm-advisory/CVE-2021-42110
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:allegro:allegro:*:*:*:*:*:windows:*:*

Версия до 3.3.4156.1 (исключая)

EPSS

Процентиль: 17%

0.00055

Низкий

7.1 High

CVSS3

7.8 High

CVSS3

6.2 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-jx3f-hj4m-h7p9

CVSS3: 7.8

github

около 4 лет назад

An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking.

EPSS

Процентиль: 17%

0.00055

Низкий

7.1 High

CVSS3

7.8 High

CVSS3

6.2 Medium

CVSS2

Дефекты

NVD-CWE-noinfo