CVE-2021-27193

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.1

Description: The issue is related to incorrect default permissions in the API of Netop Vision Pro, allowing a remote unauthenticated attacker to read and write files on the remote machine with system privileges, resulting in a privilege escalation.

Recommendations: For versions up to and including 9.7.1, update to a version that includes a fix for the incorrect default permissions vulnerability to prevent privilege escalation. As a temporary workaround, consider restricting access to the API to minimize the risk of exploitation.