CVE-2021-22803
CVE-2021-22803
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 fev 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)
Produtos afetados
n/a · Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →