by Kastro
Paper/Archive/CVE-2021-32930

CVE-2021-32930

icscert — The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations an…

EPSS 8%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 94.8.948 × 2019.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182).

Affected

ProductAffectedFixed inSource
iViewversions prior to v5.7.03.6182–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-21-154-01