PT-2021-20135
CVE-2021-33408
·
Published
2021-05-27
·
Updated
2021-06-08
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Ab Initio Control>Center versions prior to 4.0.2.6
Description
A Local File Inclusion issue allows remote attackers to retrieve arbitrary files. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations
For versions prior to 4.0.2.6, update to version 4.0.2.6 or 4.0.3.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾