The vulnerability of the Network Config UI user interface in Google Chrome and Microsoft Edge browsers allows attackers to perform spoofing attacks.

🗓️ 21 Apr 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

The Network Config UI vulnerability in Chrome and Edge allows spoofing and spear-phishing via crafted pages.

Reporter	Title	Published	Views	Family All 56
FreeBSD	chromium -- multiple vulnerabilities	25 May 202100:00	–	freebsd
FreeBSD	chromium -- multiple vulnerabilities	14 Apr 202100:00	–	freebsd
Tenable Nessus	Google Chrome < 91.0.4472.77 Multiple Vulnerabilities	25 May 202100:00	–	nessus
Tenable Nessus	Debian DSA-4906-1 : chromium - security update	29 Apr 202100:00	–	nessus
Tenable Nessus	FreeBSD : chromium -- multiple vulnerabilities (674ed047-be0a-11eb-b927-3065ec8fd3ec)	27 May 202100:00	–	nessus
Tenable Nessus	FreeBSD : chromium -- multiple vulnerabilities (f3d86439-9def-11eb-97a0-e09467587c17)	16 Apr 202100:00	–	nessus
Tenable Nessus	GLSA-202104-08 : Chromium, Google Chrome: Multiple vulnerabilities	3 May 202100:00	–	nessus
Tenable Nessus	Google Chrome < 90.0.4430.72 Multiple Vulnerabilities	14 Apr 202100:00	–	nessus
Tenable Nessus	Google Chrome < 90.0.4430.72 Multiple Vulnerabilities	14 Apr 202100:00	–	nessus
Tenable Nessus	Microsoft Edge (Chromium) < 90.0.818.39 Multiple Vulnerabilities	16 Apr 202100:00	–	nessus

Vulners

Node

google google_chromeRange<90.0.4430.72

OR

microsoft microsoft_edgeRange<90.0.818.39

Source	Link
chromereleases	www.chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html
msrc	www.msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21212
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21212
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-21212
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
securitylab	www.securitylab.ru/vulnerability/518981.php
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

16 Sep 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 33.7

CVSS 24.3

EPSS0.01809

Network Config UI Google Chrome Microsoft Edge Spoofing Spear phishing Information representation error Crafted web page