Lucene search

MitreCVE-2021-31538

HistoryJun 10, 2021 - 3:15 p.m.

CVE-2021-31538

2021-06-1015:15:09

CWE-22

mitre

web.nvd.nist.gov

cve-2021-31538

lancom

r&s unified firewall

lcos fx 10.5

relative path traversal

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.005

Percentile

76.5%

JSON

LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal.

Affected configurations

Nvd

Node

lancom-systemslcos_fxMatch10.5-

lancom-systemslcos_fxMatch10.5ru1

lancom-systemslcos_fxMatch10.5ru2

lancom-systemslcos_fxMatch10.5ru3

AND

lancom-systemsuf-160Match-

lancom-systemsuf-260Match-

lancom-systemsuf-500Match-

lancom-systemsuf-60Match-

lancom-systemsuf-910Match-

VendorProductVersionCPE
lancom-systemslcos_fx10.5cpe:2.3:o:lancom-systems:lcos_fx:10.5:-:*:*:*:*:*:*
lancom-systemslcos_fx10.5cpe:2.3:o:lancom-systems:lcos_fx:10.5:ru1:*:*:*:*:*:*
lancom-systemslcos_fx10.5cpe:2.3:o:lancom-systems:lcos_fx:10.5:ru2:*:*:*:*:*:*
lancom-systemslcos_fx10.5cpe:2.3:o:lancom-systems:lcos_fx:10.5:ru3:*:*:*:*:*:*
lancom-systemsuf-160-cpe:2.3:h:lancom-systems:uf-160:-:*:*:*:*:*:*:*
lancom-systemsuf-260-cpe:2.3:h:lancom-systems:uf-260:-:*:*:*:*:*:*:*
lancom-systemsuf-500-cpe:2.3:h:lancom-systems:uf-500:-:*:*:*:*:*:*:*
lancom-systemsuf-60-cpe:2.3:h:lancom-systems:uf-60:-:*:*:*:*:*:*:*
lancom-systemsuf-910-cpe:2.3:h:lancom-systems:uf-910:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lancom-systems	lcos_fx	10.5	cpe:2.3:o:lancom-systems:lcos_fx:10.5:-::::::
lancom-systems	lcos_fx	10.5	cpe:2.3:o:lancom-systems:lcos_fx:10.5:ru1::::::
lancom-systems	lcos_fx	10.5	cpe:2.3:o:lancom-systems:lcos_fx:10.5:ru2::::::
lancom-systems	lcos_fx	10.5	cpe:2.3:o:lancom-systems:lcos_fx:10.5:ru3::::::
lancom-systems	uf-160	-	cpe:2.3:h:lancom-systems:uf-160:-:::::::*
lancom-systems	uf-260	-	cpe:2.3:h:lancom-systems:uf-260:-:::::::*
lancom-systems	uf-500	-	cpe:2.3:h:lancom-systems:uf-500:-:::::::*
lancom-systems	uf-60	-	cpe:2.3:h:lancom-systems:uf-60:-:::::::*
lancom-systems	uf-910	-	cpe:2.3:h:lancom-systems:uf-910:-:::::::*

References

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-010.txt

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.005

Percentile

76.5%

JSON

Related for CVE-2021-31538