Lucene search
PRIOn knowledge basePRION:CVE-2021-40846HistoryMar 04, 2022 - 10:15 p.m.
Design/Logic Flaw
2022-03-0422:15:00
PRIOn knowledge base
www.prio-n.com
5
An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check, and request, updates. Thus, attackers can man-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| trading_paints | le | 2.0.36 |
Related
cvelist
cvelist
CVE-2021-40846
2022-03-04 21:33:05
cve
cve
CVE-2021-40846
2022-03-04 22:15:19
nvd
nvd
CVE-2021-40846
2022-03-04 22:15:19