CVE-2021-46354

Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in…

published February 9, 2022

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability to send requests to other systems can allow the vulnerable server to filtrate the real IP of the web server or increase the attack surface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12888 · 96.3th percentile
Published
2022-02-09T13:10Z
EPSS history
Timeline
  • 09 FEB 13:10Z
    Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in…
    cvelistv5