CVE-2021-41315

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility

published September 17, 2021

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (with access to the console application) to execute arbitrary OS commands and escalate privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01261 · 69.4th percentile
Published
2021-09-17T14:46Z
EPSS history
Timeline
  • 17 SEP 14:46Z
    The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility
    cvelistv5