by Kastro
Paper/Archive/CVE-2021-3832

CVE-2021-3832

Ártica Integria IMS — Integria IMS Remote Code Execution

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.9.829 × 2016.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in order to exploit the vulnerability.

Affected

ProductAffectedFixed inSource
Integria IMS5.0.92–CNA

Scores by source

INCIBE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refincibe-cert.es/en/early-warning/security-advisories/integria-ims-remote-code-executionrefintegriaims.com/en/services/updates