deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-29482
Published: 2021-04-28
Description: xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. The problem has been fixed in release v0.5.8. As a workaround users can limit the size of the compressed file input to a reasonable size for their use case. The standard library had recently the same issue and got the CVE-2020-16845 allocated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b; https://github.com/ulikunitz/xz/security/advisories/GHSA-25xm-hr59-7c27; https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b
CVE: CVE-2021-25152
Published: 2021-04-28
Description: A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE: CVE-2021-25164
Published: 2021-04-28
Description: A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE: CVE-2021-25165
Published: 2021-04-28
Description: A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE: CVE-2020-22781
Published: 2021-04-28
Description: In Etherpad < 1.8.3, a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denial of service (crash the instance).
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/ether/etherpad-lite/issues/3502; https://github.com/ether/etherpad-lite/issues/3502
CVE: CVE-2020-22782
Published: 2021-04-28
Description: Etherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance.
CVSS Score: 7.5 (HIGH)
References: https://github.com/ether/etherpad-lite/issues/3825; https://github.com/ether/etherpad-lite/issues/3825
CVE: CVE-2020-22783
Published: 2021-04-28
Description: Etherpad <1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://github.com/ether/etherpad-lite/commit/53f126082a8b3d094e48b159f0f0bc8a5db4b2f4; https://github.com/ether/etherpad-lite/issues/3421; https://github.com/ether/etherpad-lite/commit/53f126082a8b3d094e48b159f0f0bc8a5db4b2f4
CVE: CVE-2020-22784
Published: 2021-04-28
Description: In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names.
CVSS Score: 7.5 (HIGH)
CWE: CWE-697
References: https://github.com/ether/ueberDB/commit/e8b58d03534ade8d83c2d1946a8350a23952531e; https://github.com/ether/ueberDB/commit/e8b58d03534ade8d83c2d1946a8350a23952531e
CVE: CVE-2020-22785
Published: 2021-04-28
Description: Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/ether/etherpad-lite/pull/3833; https://github.com/ether/etherpad-lite/pull/3833
CVE: CVE-2020-22789
Published: 2021-04-28
Description: Unauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via the login page. The XSS is executed when an administrator accesses the logs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://community.safe.com/s/article/FME-Server-Stored-Cross-Site-Scripting-XSS-Vulnerabilities; https://community.safe.com/s/article/fme-server-2019-security-update; https://mexicanpentester.com/2020/04/09/vulnerabilities-in-fme-server-versions-2019-2-and-2020-0-beta-and-probably-previous-versions/
CVE: CVE-2020-22790
Published: 2021-04-28
Description: Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via modifying the name of the users. The XSS is executed when an administrator access the logs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://community.safe.com/s/article/FME-Server-Stored-Cross-Site-Scripting-XSS-Vulnerabilities; https://community.safe.com/s/article/fme-server-2019-security-update; https://mexicanpentester.com/2020/04/09/vulnerabilities-in-fme-server-versions-2019-2-and-2020-0-beta-and-probably-previous-versions/
CVE: CVE-2020-7037
Published: 2021-04-28
Description: An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611, CWE-611
References: https://support.avaya.com/css/P8/documents/101075574; https://support.avaya.com/css/P8/documents/101075574
CVE: CVE-2020-7038
Published: 2021-04-28
Description: A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://support.avaya.com/css/P8/documents/101075574; https://support.avaya.com/css/P8/documents/101075574
CVE: CVE-2021-29483
Published: 2021-04-28
Description: ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration variables set through the ManageWiki variable to all users. This has been patched by https://github.com/miraheze/ManageWiki/compare/99f3b2c8af18...befb83c66f5b.patch. If you are unable to patch set `$wgAPIListModules['wikiconfig'] = 'ApiQueryDisabled';` or remove private config as a workaround.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-200
References: https://github.com/miraheze/ManageWiki/commit/befb83c66f5b643e174897ea41a8a46679b26304; https://github.com/miraheze/ManageWiki/security/advisories/GHSA-jmc9-rv2f-g8vv; https://phabricator.miraheze.org/T7213
CVE: CVE-2021-2321
Published: 2021-04-28
Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-125
References: https://www.oracle.com/security-alerts/cpuapr2021.html; https://www.oracle.com/security-alerts/cpuapr2021.html
CVE: CVE-2021-21391
Published: 2021-04-29
Description: CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office, and ckeditor5-widget. Following an internal audit, a regular expression denial of service (ReDoS) vulnerability has been discovered in multiple CKEditor 5 packages. The vulnerability allowed to abuse particular regular expressions, which could cause a significant performance drop resulting in a browser tab freeze. It affects all users using the CKEditor 5 packages listed above at version <= 26.0.0. The problem has been recognized and patched. The fix will be available in version 27.0.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-3rh3-wfr4-76mj; https://www.npmjs.com/package/%40ckeditor/ckeditor5-engine; https://www.npmjs.com/package/%40ckeditor/ckeditor5-font
CVE: CVE-2021-21414
Published: 2021-04-29
Description: Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the `@prisma/sdk` package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. It only affects the `getPackedPackage` function and this function is not advertised and only used for tests & building our CLI, no malicious code was found after checking our codebase.
CVSS Score: 7.7 (HIGH)
CWE: CWE-78
References: https://github.com/prisma/prisma/pull/6245; https://github.com/prisma/prisma/security/advisories/GHSA-pxcc-hj8w-fmm7; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-25214
Published: 2021-04-29
Description: In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://www.openwall.com/lists/oss-security/2021/04/29/1; http://www.openwall.com/lists/oss-security/2021/04/29/2; http://www.openwall.com/lists/oss-security/2021/04/29/3
CVE: CVE-2021-25215
Published: 2021-04-29
Description: In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://www.openwall.com/lists/oss-security/2021/04/29/1; http://www.openwall.com/lists/oss-security/2021/04/29/2; http://www.openwall.com/lists/oss-security/2021/04/29/3
CVE: CVE-2021-25216
Published: 2021-04-29
Description: In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting values for the tkey-gssapi-keytab or tkey-gssapi-credential configuration options. Although the default configuration is not vulnerable, GSS-TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server environments that combine BIND servers with Active Directory domain controllers. For servers that meet these conditions, the ISC SPNEGO implementation is vulnerable to various attacks, depending on the CPU architecture for which BIND was built: For named binaries compiled for 64-bit platforms, this flaw can be used to trigger a buffer over-read, leading to a server crash. For named binaries compiled for 32-bit platforms, this flaw can be used to trigger a server crash due to a buffer overflow and possibly also to achieve remote code execution. We have determined that standard SPNEGO implementations are available in the MIT and Heimdal Kerberos libraries, which support a broad range of operating systems, rendering the ISC implementation unnecessary and obsolete. Therefore, to reduce the attack surface for BIND users, we will be removing the ISC SPNEGO implementation in the April releases of BIND 9.11 and 9.16 (it had already been dropped from BIND 9.17). We would not normally remove something from a stable ESV (Extended Support Version) of BIND, but since system libraries can replace the ISC SPNEGO implementation, we have made an exception in this case for reasons of stability and security.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2021/04/29/1; http://www.openwall.com/lists/oss-security/2021/04/29/2; http://www.openwall.com/lists/oss-security/2021/04/29/3
CVE: CVE-2021-31776
Published: 2021-04-29
Description: Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://docs.aviatrix.com/Downloads/samlclient.html; https://docs.aviatrix.com/Downloads/samlclient.html#windows-win; https://docs.aviatrix.com/HowTos/changelog.html#aviatrix-vpn-client-changelog
CVE: CVE-2021-31875
Published: 2021-04-29
Description: In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because "there isn’t very much of an opportunity to exploit this reliably for an information leak, so there isn’t any real security impact."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193, CWE-787
References: https://github.com/418sec/mjs/pull/2; https://github.com/cesanta/mjs/releases/tag/1.26; https://huntr.dev/bounties/1-other-mjs/
CVE: CVE-2020-36327
Published: 2021-04-29
Description: Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every "Dependency Confusion" issue in every product.
CVSS Score: 8.8 (HIGH)
References: https://bundler.io/blog/2021/02/15/a-more-secure-bundler-we-fixed-our-source-priorities.html; https://github.com/rubygems/rubygems/issues/3982; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWXHK5UUHVSHF7HTHMX6JY3WXDVNIHSL/
CVE: CVE-2021-31879
Published: 2021-04-29
Description: GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2[PII_REDACTED].
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html
CVE: CVE-2021-25163
Published: 2021-04-29
Description: A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE: CVE-2021-25166
Published: 2021-04-29
Description: A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE: CVE-2021-25167
Published: 2021-04-29
Description: A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE: CVE-2021-29137
Published: 2021-04-29
Description: A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE: CVE-2021-29144
Published: 2021-04-29
Description: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 6.5 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2021-29145
Published: 2021-04-29
Description: A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2021-29146
Published: 2021-04-29
Description: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2021-29147
Published: 2021-04-29
Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2021-29138
Published: 2021-04-29
Description: A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 6.5 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2021-29140
Published: 2021-04-29
Description: A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2021-29142
Published: 2021-04-29
Description: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2020-21990
Published: 2021-04-29
Description: Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://www.exploit-db.com/exploits/47824; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5555.php; https://www.exploit-db.com/exploits/47824
CVE: CVE-2021-29139
Published: 2021-04-29
Description: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2021-29141
Published: 2021-04-29
Description: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVSS Score: 6.5 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt
CVE: CVE-2020-21992
Published: 2021-04-29
Description: Inim Electronics SmartLiving SmartLAN/G/SI <=6.x suffers from an authenticated remote command injection vulnerability. The issue exist due to the 'par' POST parameter not being sanitized when called with the 'testemail' module through web.cgi binary. The vulnerable CGI binary (ELF 32-bit LSB executable, ARM) is calling the 'sh' executable via the system() function to issue a command using the mailx service and its vulnerable string format parameter allowing for OS command injection with root privileges. An attacker can remotely execute system commands as the root user using default credentials and bypass access controls in place.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5544.php; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5544.php