CVE-2021-33214

· MEDIUMModified

← All CVEs

CVSS v3.1

6.1

EPSS

0.65%

Published

Jul 9, 2021

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

Weaknesses (CWE)

CWE-276

Affected Products (1)

hms-networks · ecatchervulnerable

References (10)

https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4

Vendor Advisory

https://labs.bishopfox.com/advisories

Third Party Advisory

https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4

ExploitThird Party Advisory

https://www.ewon.biz/about-us/security

Vendor Advisory

https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher

Vendor Advisory

https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4

Vendor Advisory

https://labs.bishopfox.com/advisories

Third Party Advisory

https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4

ExploitThird Party Advisory

https://www.ewon.biz/about-us/security

Vendor Advisory

https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs