by Kastro
Paper/Archive/CVE-2021-38471

CVE-2021-38471

AUVESY Versiondog — AUVESY Versiondog

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (CNA, NVD agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 65.8.658 × 2013.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files.

Affected

ProductAffectedFixed inSource
VersiondogAll – 8.0–CNA

Scores by source

icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

refus-cert.cisa.gov/ics/advisories/icsa-21-292-01