PT-2021-16640

CVE-2021-25450

Published

2021-09-09

Updated

2021-09-22

CVSS 3.1

6.5

Medium

MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: FactoryAirCommnadManger versions prior to SMR Sep-2021 Release 1

Description: The issue allows attackers to write files as system uid via a remote socket, exploiting a path traversal vulnerability.

Recommendations: For versions prior to SMR Sep-2021 Release 1, update to SMR Sep-2021 Release 1 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾