by Kastro
Paper/Archive/CVE-2021-42952

CVE-2021-42952

mitre — Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability.

EPSS 2%CVSS 9.9
critical.is priorityof 100
45
CVSS 9.9 (NVD)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 75.4.754 × 2015.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability. Upon launching Remote Code Execution from the Notebook, users can then use that to subsequently escape the running context sandbox and proceed to access internal Zepl assets including cloud metadata services.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refseclists.org/fulldisclosure/2022/Feb/32