CVE-2021-36122

An issue was discovered in Echo ShareCare 8.15.5

published July 13, 2021

CVSS
—
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParse_Sup/UnzipFile_Upd.cfm is susceptible to a command argument injection vulnerability when processing remote input in the zippass parameter from an authenticated user, leading to the ability to inject arbitrary arguments to 7z.exe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01023 · 63.2th percentile
Published
2021-07-13T14:00Z
EPSS history
Timeline
  • 13 JUL 14:00Z
    An issue was discovered in Echo ShareCare 8.15.5
    cvelistv5