CVE-2021-40376

otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe

published March 7, 2022

CVSS
—
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00400 · 33.1th percentile
Published
2022-03-07T03:41Z
EPSS history
Timeline
  • 07 MAR 03:41Z
    otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe
    cvelistv5