Lucene search

K
nvd[email protected]NVD:CVE-2021-33633
HistoryMar 23, 2024 - 12:15 p.m.

CVE-2021-33633

2024-03-2312:15:07
CWE-78
web.nvd.nist.gov
1
openeuler
command injection
linux
aops-ceres
vulnerability

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0005 Low

EPSS

Percentile

16.4%

Improper Neutralization of Special Elements used in an OS Command (β€˜OS Command Injection’) vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py.

This issue affects aops-ceres: from 1.3.0 through 1.4.1.

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0005 Low

EPSS

Percentile

16.4%

Related for NVD:CVE-2021-33633