CVE-2021-4031
Syltek Insufficient Verification of Data Authenticity
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.5EPSS 0.5%KEV nãoPoC —Patch —
Ciclo de vida
18 mar 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Productos afectados
Syltek · Syltek¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →