CVE-2021-35216CWE-502

Deserialization of Untrusted Data in Resource Controls Remote Code Execution

High · published September 1, 2021

Patch now

High probability of exploitation

CVSS calls it high at 8.9. It sits in the 99.6th percentile for exploit probability.

CVSS v3.1
8.9
EPSS
81%
Percentile
99.6
In the wild
Unconfirmed
What it is

Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An Authenticated Attacker with network access via HTTP can compromise this vulnerability can result in Remote Code Execution.

The record
Technical detail
CVSS v3.1
8.9 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.81402 · 99.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2021-09-01T14:23Z
EPSS history
Timeline
  • 01 SEP 14:23Z
    Deserialization of Untrusted Data in Resource Controls Remote Code Execution
    cvelistv5