Lucene search

DIVDCVE-2021-42081

HistoryJul 10, 2023 - 4:15 p.m.

CVE-2021-42081

2023-07-1016:15:47

CWE-78

DIVD

web.nvd.nist.gov

cve-2021-42081

remote code execution

api security

authentication

administrator

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

60.1%

JSON

An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API.

Affected configurations

Nvd

Node

osnexusquantastorRange<6.0.0.355

VendorProductVersionCPE
osnexusquantastor*cpe:2.3:a:osnexus:quantastor:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
osnexus	quantastor	*	cpe:2.3:a:osnexus:quantastor::::::::

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "QuantaStor",
    "vendor": "OSNEXUS",
    "versions": [
      {
        "lessThan": "6.0.0.355",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

csirt.divd.nl/CVE-2021-42081

www.divd.nl/DIVD-2021-00020

www.osnexus.com/products/software-defined-storage

www.wbsec.nl/osnexus

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

60.1%

JSON

Related for CVE-2021-42081