deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-37085
Published: 2021-12-07
Description: There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37086
Published: 2021-12-07
Description: There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox.
CVSS Score: 8.6 (HIGH)
CWE: CWE-281
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37087
Published: 2021-12-07
Description: There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can create arbitrary file.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37088
Published: 2021-12-07
Description: There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can write any content to any file.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37089
Published: 2021-12-07
Description: There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-459
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37090
Published: 2021-12-07
Description: There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37091
Published: 2021-12-07
Description: There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.
CVSS Score: 7.5 (HIGH)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37094
Published: 2021-12-07
Description: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37095
Published: 2021-12-07
Description: There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37096
Published: 2021-12-07
Description: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37099
Published: 2021-12-07
Description: There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37100
Published: 2021-12-07
Description: There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-43789
Published: 2021-12-07
Description: PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with `orderBy` and `sortOrder` parameters. The problem is fixed in version 1.7.8.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/PrestaShop/PrestaShop/issues/26623; https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.2; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-6xxj-gcjq-wgf4
CVE: CVE-2021-43175
Published: 2021-12-07
Description: The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action that routes to other PHP files that implement the various API functions. Vulnerable versions of GOautodial validate the username and password incorrectly, allowing the caller to specify any values for these parameters and successfully authenticate. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
CVSS Score: 7.5 (HIGH)
CWE: CWE-305, CWE-287
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-goautodial-vulnerabilities; https://www.synopsys.com/blogs/software-security/cyrc-advisory-goautodial-vulnerabilities
CVE: CVE-2021-43176
Published: 2021-12-07
Description: The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and load the correct PHP file to implement the API call. Vulnerable versions of GOautodial do not sanitize the user input that specifies the action. This permits an attacker to execute any PHP source file with a .php extension that is present on the disk and readable by the GOautodial web server process. Combined with CVE-2021-43175, it is possible for the attacker to do this without valid credentials. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS Score: 8.8 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.synopsys.com/blogs/software-security/cyrc-advisory-goautodial-vulnerabilities; https://www.synopsys.com/blogs/software-security/cyrc-advisory-goautodial-vulnerabilities
CVE: CVE-2021-43805
Published: 2021-12-07
Description: Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest order's email was subject to exponential backtracking through a fragment like `a.a.` Versions 3.1.4, 3.0.4, and 2.11.13 have been patched to use a different regular expression. The maintainers added a check for email addresses that are no longer valid that will print information about any affected orders that exist. If a prompt upgrade is not an option, a workaround is available. It is possible to edit the file `config/application.rb` manually (with code provided by the maintainers in the GitHub Security Advisory) to check email validity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/solidusio/solidus/commit/9867153e01e3c3b898cdbcedd7b43375ea922401; https://github.com/solidusio/solidus/security/advisories/GHSA-qxmr-qxh6-2cc9; https://github.com/solidusio/solidus/commit/9867153e01e3c3b898cdbcedd7b43375ea922401
CVE: CVE-2020-12140
Published: 2021-12-07
Description: A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/contiki-ng/contiki-ng/pull/1662; https://twitter.com/ScepticCtf; https://github.com/contiki-ng/contiki-ng/pull/1662
CVE: CVE-2021-24041
Published: 2021-12-07
Description: A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://www.whatsapp.com/security/advisories/2021/; https://www.whatsapp.com/security/advisories/2021/
CVE: CVE-2021-37940
Published: 2021-12-07
Description: An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146; https://discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146
CVE: CVE-2021-40859
Published: 2021-12-07
Description: Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.
CVSS Score: 9.8 (CRITICAL)
References: https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses; https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors; https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
CVE: CVE-2021-41716
Published: 2021-12-07
Description: Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://maharashtra.com; https://cvewalkthrough.com/cve-2021-41716-mahavitaran-android-application-account-take-over-via-otp-fixation/; http://maharashtra.com
CVE: CVE-2021-43798
Published: 2021-12-07
Description: Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html; http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html; http://www.openwall.com/lists/oss-security/2021/12/09/2
CVE: CVE-2021-40288
Published: 2021-12-07
Description: A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware; https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
CVE: CVE-2021-42972
Published: 2021-12-07
Description: NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42973
Published: 2021-12-07
Description: NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42976
Published: 2021-12-07
Description: NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42977
Published: 2021-12-07
Description: NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42979
Published: 2021-12-07
Description: NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42980
Published: 2021-12-07
Description: NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42983
Published: 2021-12-07
Description: NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42986
Published: 2021-12-07
Description: NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42987
Published: 2021-12-07
Description: Eltima USB Network Gate is affected by Integer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42988
Published: 2021-12-07
Description: Eltima USB Network Gate is affected by Buffer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42990
Published: 2021-12-07
Description: FlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42993
Published: 2021-12-07
Description: FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42994
Published: 2021-12-07
Description: Donglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-42996
Published: 2021-12-07
Description: Donglify is affected by Integer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-43000
Published: 2021-12-07
Description: Amzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-43002
Published: 2021-12-07
Description: Amzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE: CVE-2021-43003
Published: 2021-12-07
Description: Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/; https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/