Lucene search

[email protected]CVE-2021-27893

HistoryMar 15, 2021 - 3:15 p.m.

CVE-2021-27893

2021-03-1515:15:15

[email protected]

web.nvd.nist.gov

cve-2021-27893

ssh

tectia

client

server

windows

local privilege escalation

connectsecure

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. ConnectSecure on Windows is affected.

Affected configurations

NVD

Node

sshtectia_clientRange<6.4.19

sshtectia_connectsecureMatch-

sshtectia_serverRange<6.4.19

AND

microsoftwindowsMatch-

CPENameOperatorVersion
ssh:tectia_clientssh tectia clientlt6.4.19
ssh:tectia_connectsecuressh tectia connectsecureeq-
ssh:tectia_serverssh tectia serverlt6.4.19

CPE	Name	Operator	Version
ssh:tectia_client	ssh tectia client	lt	6.4.19
ssh:tectia_connectsecure	ssh tectia connectsecure	eq	-
ssh:tectia_server	ssh tectia server	lt	6.4.19

References

info.ssh.com/tectia-vulnerability-cve-2021-27893

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-27893

prion1 cvelist1 nvd1