CVE-2021-37911CWE-269

The management interface of BenQ smart wireless conference projector does not properly control user's privilege

High · published August 30, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-08-30T14:35Z
EPSS history
Timeline
  • 30 AUG 14:35Z
    The management interface of BenQ smart wireless conference projector does not properly control user's privilege
    cvelistv5