CVE-2021-32089

An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices

published May 11, 2021

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

⚠️ One crafty upload is all it takes! An attacker can bypass authentication and upload any file they want on affected Zebra FX9500 devices, making it a pretty big deal for users still on unsupported models. 🔥 Think of it like a hotel with an open window; an intruder can toss in a bag of files without even needing a keycard! Once inside, they can rummage through anyone's belongings and potentially make a mess of things. The consequences could be absolutely devastating. An attacker could not only access sensitive information but could also execute malicious code, leading to further compromise of the system. Imagine the chaos that could ensue if this vulnerability is exploited!

Put simply

Think of it like a hotel with an open window; an intruder can toss in a bag of files without even needing a keycard! Once inside, they can rummage through anyone's belongings and potentially make a mess of things. This vulnerability allows unauthenticated file uploads on Zebra FX9500 devices, letting attackers place arbitrary files in the filesystem, which can be accessed through the web interface.

What to do

The consequences could be absolutely devastating. An attacker could not only access sensitive information but could also execute malicious code, leading to further compromise of the system. Imagine the chaos that could ensue if this vulnerability is exploited! To protect your systems, immediately review your network for any FX9500 devices and consider replacing them with supported models. If replacement isn’t feasible, ensure your devices are on a closed network with strict access controls to limit exposure. You've got this! Stay vigilant and keep your systems safe from sneaky uploads! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01638 · 76.1th percentile
Published
2021-05-11T20:39Z
EPSS history
Timeline
  • 11 MAY 20:39Z
    An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices
    cvelistv5