CVE-2021-44793

Katalog CVE

CVSS 8.6 · High EPSS 1,2%

Kerentanan Missing Authorization pada krontech single connect. Skor CVSS 3.1 8.6 (High) menurut usom.gov.tr.

Deskripsi (NVD)

Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information including the database credentials. Since the database runs with high privileges it is possible to execute commands with the attained credentials.

Rincian

Terbit di NVD

27 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.6 (High), sumber usom.gov.tr
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.usom.gov.tr/bildirim/tr-22-0093 advisory pihak ketiga
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0093