CVE-2021-20676

Katalog CVE

CVSS 4.3 · Medium EPSS 0,80%

Kerentanan Incorrect Authorization pada m-system dl8-a firmware, m-system dl8-b firmware +3 lainnya. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

M-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0) allows remote authenticated attackers to bypass access restriction and conduct prohibited operations via unspecified vectors.

Rincian

Terbit di NVD

18 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.m-system.co.jp/download_w/dl_dl8updaterE.html advisory vendor
• https://jvn.jp/en/jp/JVN47497535/index.html advisory pihak ketiga