Lucene search

[email protected]CVE-2021-27892

HistoryMar 15, 2021 - 3:15 p.m.

CVE-2021-27892

2021-03-1515:15:15

[email protected]

web.nvd.nist.gov

cve

2021

27892

ssh

tectia

client

server

windows

local privilege escalation

connectsecure

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affected.

Affected configurations

NVD

Node

sshtectia_clientRange<6.4.19

sshtectia_connectsecureMatch-

sshtectia_serverRange<6.4.19

AND

microsoftwindowsMatch-

CPENameOperatorVersion
ssh:tectia_clientssh tectia clientlt6.4.19
ssh:tectia_connectsecuressh tectia connectsecureeq-
ssh:tectia_serverssh tectia serverlt6.4.19

CPE	Name	Operator	Version
ssh:tectia_client	ssh tectia client	lt	6.4.19
ssh:tectia_connectsecure	ssh tectia connectsecure	eq	-
ssh:tectia_server	ssh tectia server	lt	6.4.19

References

info.ssh.com/tectia-vulnerability-cve-2021-27892

Social References

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-27892

prion1 nvd1 cvelist1