Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-38485

The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk.

Published

2021-10-22T14:15:08.580

Last Modified

2024-11-21T06:17:13.210

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System emerson wireless_1410_gateway_firmware < 4.7.94 Yes
Hardware emerson wireless_1410_gateway * No
Operating System emerson wireless_1410d_gateway_firmware < 4.7.94 Yes
Hardware emerson wireless_1410d_gateway * No
Operating System emerson wireless_1420_gateway_firmware < 4.7.94 Yes
Hardware emerson wireless_1420_gateway - No
References