CVE-2021-22716
CWE-732 — Incorrect Permission AssignmentCWE-269 — Improper Privilege Management4 documents4 sources
Severity
7.8HIGH
EPSS
0.2%
top 58.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 13
Latest updateMay 24
Description
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit (V1.15.9 and prior)
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-h57p-xqpc-6hj8: A CWE-269: Improper Privilege Management vulnerability exists in C-Bus Toolkit (V1↗2022-05-24
CVEList▶
CVE-2021-22716: A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user↗2021-04-13