CVE-2021-34820

CVE-2021-34820 targets the Novus Management System’s HTTP Server, enabling a remote, unauthenticated attacker to perform directory traversal via HTTP GET and access sensitive files. Affected through version 1.51.2. The CVSSv3.1 vector shows HIGH impact to confidentiality (C:H) with network access...

CVE-2021-34821

CVE-2021-34821 affects AAT Novus Management System (NMS) up to version 1.51.2. The WebUI improperly handles 404s, allowing a remote, unauthenticated attacker to issue requests to non-existent URIs. The vulnerability stems from the URL path filename being copied into the HTML document as plain tex...