CVE-2021-32951

Description

References

• us-cert.cisa.gov/ics/advisories/icsa-21-229-02 · Patch

Weitere Schwachstellen in webaccess/nms

• CVE-2020-10631KRITISCH 9.8An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.
• CVE-2020-10629HOCH 7.5WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive f…
• CVE-2020-10625KRITISCH 9.8WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.
• CVE-2020-10623MITTEL 6.5Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to …
• CVE-2020-10619KRITISCH 9.1An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.