Lucene search

K
cvelistIcscertCVELIST:CVE-2021-27447
HistoryDec 21, 2021 - 5:55 p.m.

CVE-2021-27447 Mesa Labs AmegaView command injection

2021-12-2117:55:03
CWE-77
icscert
www.cve.org
3
mesa labs amegaview
command injection
vulnerability
remote code execution

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.006

Percentile

78.3%

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code.

CNA Affected

[
  {
    "product": "AmegaView",
    "vendor": "Mesa Labs",
    "versions": [
      {
        "lessThanOrEqual": "3.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.006

Percentile

78.3%

Related for CVELIST:CVE-2021-27447