by Kastro
Paper/Archive/CVE-2021-27453

CVE-2021-27453

Mesa Labs AmegaView — Mesa Labs AmegaView authentication bypass

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.2.642 × 2012.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.

Affected

ProductAffectedFixed inSource
AmegaViewunspecified – 3.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

refus-cert.cisa.gov/ics/advisories/icsa-21-147-03