Lucene search

MitreCVE-2021-45783

HistoryMay 05, 2022 - 11:15 a.m.

CVE-2021-45783

2022-05-0511:15:07

CWE-22

mitre

web.nvd.nist.gov

bookeen

notea

firmware

bk_r_1.0.5_20210608

directory traversal

vulnerability

nvd

cve-2021-45783

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON

Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to obtain sensitive information.

Affected configurations

Nvd

Node

bookeennotea_firmwareMatchbk_r_1.0.5_20210608

AND

bookeennoteaMatch-

VendorProductVersionCPE
bookeennotea_firmwarebk_r_1.0.5_20210608cpe:2.3:o:bookeen:notea_firmware:bk_r_1.0.5_20210608:*:*:*:*:*:*:*
bookeennotea-cpe:2.3:h:bookeen:notea:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bookeen	notea_firmware	bk_r_1.0.5_20210608	cpe:2.3:o:bookeen:notea_firmware:bk_r_1.0.5_20210608:::::::*
bookeen	notea	-	cpe:2.3:h:bookeen:notea:-:::::::*

References

bookeen.com

packetstormsecurity.com/files/167016/Bookeen-Notea-BK_R_1.0.5_20210608-Directory-Traversal.html

github.com/cmaillioux/SecurityResearch/blob/main/CVE-2021-45783

Social References

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON

Related for CVE-2021-45783