CVE-2021-37207CWE-732

A vulnerability has been identified in SENTRON powermanager V3 (All versions)

published November 9, 2021

CVSS
—
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns improper access rights to a specific folder containing configuration files. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.5th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-11-09T11:32Z
EPSS history
Timeline
  • 09 NOV 11:32Z
    A vulnerability has been identified in SENTRON powermanager V3 (All versions)
    cvelistv5