Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2021-27964
HistoryMar 05, 2021 - 2:15 a.m.

CVE-2021-27964

2021-03-0502:15:12
CWE-434
mitre
web.nvd.nist.gov
101
8
cve-2021-27964
sonlogger
unauthenticated
arbitrary file upload
security vulnerability
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.696

Percentile

98.1%

JSON

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file.

Affected configurations

Nvd
Node
sfcyazilimsonloggerRange<6.4.1
VendorProductVersionCPE
sfcyazilimsonlogger*cpe:2.3:a:sfcyazilim:sonlogger:*:*:*:*:*:*:*:*

Social References

More

Related

packetstorm 1
prion 1
nvd 1
zdt 1
checkpoint_advisories 1
cvelist 1
exploitdb 1
githubexploit 1
wallarmlab 2
packetstorm
packetstorm
SonLogger 4.2.3.3 Shell Upload
2021-03-15 00:00:00
prion
prion
Design/Logic Flaw
2021-03-05 02:15:00
nvd
nvd
CVE-2021-27964
2021-03-05 02:15:12
zdt
zdt
SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload Exploit
2021-03-15 00:00:00
checkpoint_advisories
checkpoint_advisories
SonLogger Arbitrary File Upload (CVE-2021-27964)
2021-03-24 00:00:00
cvelist
cvelist
CVE-2021-27964
2021-03-05 01:37:20
exploitdb
exploitdb
SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload (Metasploit)
2021-03-15 00:00:00
githubexploit
githubexploit
Exploit for Incorrect Permission Assignment for Critical Resource in Sfcyazilim Sonlogger
2021-02-26 11:44:04
wallarmlab
wallarmlab
Weekly exploit digest – March, 15-21 – VMware View Planner, Win32k ConsoleControl, Microsoft Windows Containers DP API
2021-03-21 13:09:00
Web vulnerabilities exploit weekly digest #1. March 8-15th 2021. VMware vCenter and Apache OFBiz RCE.
2021-03-16 18:22:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.696

Percentile

98.1%

JSON
Related for CVE-2021-27964
packetstorm1prion1nvd1zdt1checkpoint_advisories1cvelist1exploitdb1githubexploit1wallarmlab2