CVE-2021-44153

Katalog CVE

CVSS 7.2 · High EPSS 2,1%

Kerentanan pada reprisesoftware reprise license manager. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Reprise RLM 14.2. When editing the license file, it is possible for an admin user to enable an option to run arbitrary executables, as demonstrated by an ISV demo "C:\Windows\System32\calc.exe" entry. An attacker can exploit this to run a malicious binary on startup, or when triggering the Reread/Restart Servers function on the webserver. (Exploitation does not require CVE-2018-15573, because the license file is meant to be changed in the application.)

Rincian

Terbit di NVD

13 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 80,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yes patch · product · advisory vendor
• http://packetstormsecurity.com/files/165194/Reprise-License-Manager-14.2-Remote-Binary-Execution.html exploit · advisory pihak ketiga · vdb entry