CVE-2021-42809CWE-913

The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library

Medium · published December 20, 2021

CVSS v3.1
6.5
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00304 · 22.0th percentile
Weakness
CWE-913 · Improper Control of Dynamically-Managed Code Resources
Published
2021-12-20T20:19Z
EPSS history
Timeline
  • 20 DEC 20:19Z
    The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library
    cvelistv5