CVE-2021-22908CWE-120

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to…

published May 27, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS

—

EPSS

69%

Percentile

99.4

In the wild

Unconfirmed

What it is

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.69377 · 99.4th percentile
Weakness: CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published: 2021-05-27T11:14Z

EPSS history

Timeline

27 MAY 11:14Z
A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to…
cvelistv5