CVE-2021-40846

An issue was discovered in Rhinode Trading Paints through 2.0.36

published March 4, 2022

CVSS
—
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check, and request, updates. Thus, attackers can man-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00685 · 52.1th percentile
Published
2022-03-04T21:33Z
EPSS history
Timeline
  • 04 MAR 21:33Z
    An issue was discovered in Rhinode Trading Paints through 2.0.36
    cvelistv5