CVE-2021-30490 in ViewPower

Sumário

de MITRE • 16/08/2022

upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 11/04/2021
• Divulgação: 16/08/2022
• Moderação: aceite
• Entrada: VDB-206496
• CPE: pronto
• CWE: CWE-284 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00298
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-30490
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-30490
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-30490/