by Kastro
Paper/Archive/CVE-2021-20790

CVE-2021-20790

J’s Communication Co., Ltd. RevoWorks Browser — Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary c…

EPSS 1%CVSS 9.6
critical.is priorityof 100
43
CVSS 9.6 (NVD)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 69.7.697 × 2013.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors.

Affected

ProductAffectedFixed inSource
RevoWorks Browser2.1.230 and earlier–CNA

Scores by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

References

refjscom.jp/news-20210910_2refjvn.jp/en/jp/JVN81658818/index.html