Lucene search

[email protected]CVE-2021-30490

HistoryAug 16, 2022 - 1:15 p.m.

CVE-2021-30490

2022-08-1613:15:08

CWE-276

[email protected]

web.nvd.nist.gov

cve-2021-30490

upsmonitor

viewpower

privilege escalation

security vulnerability

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

JSON

upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation.

Affected configurations

NVD

Node

microsoftwindowsMatch-

AND

power-software-downloadviewpowerRange1.04-21012–1.04-21353-

power-software-downloadviewpowerRange1.04-21012–1.04-21353pro

CPENameOperatorVersion
power-software-download:viewpowerpower-software-download viewpowerle1.04-21353

CPE	Name	Operator	Version
power-software-download:viewpower	power-software-download viewpower	le	1.04-21353

References

www.0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.html

www.power-software-download.com/viewpower.html

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

JSON

Related for CVE-2021-30490

prion1 cvelist1 nvd1