CVE-2021-27236

Name of the Vulnerable Software and Affected Versions: Mutare Voice (EVM) versions 3.x before 3.3.8

Description: An issue was discovered in Mutare Voice (EVM) that allows Unauthenticated Local File Inclusion via the getfile.asp endpoint, which can be leveraged to achieve Remote Code Execution.

Recommendations: For Mutare Voice (EVM) versions 3.x before 3.3.8, update to version 3.3.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the getfile.asp endpoint to minimize the risk of exploitation.