CVE-2021-20655

2021-02-1702:05:30

jpcert

www.cve.org

filezen

vulnerability

remote attacker

administrator rights

os commands

AI Score

7.4

Confidence

High

EPSS

0.008

Percentile

82.0%

JSON

FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.

CNA Affected

[
  {
    "product": "FileZen",
    "vendor": "Soliton Systems K.K.",
    "versions": [
      {
        "status": "affected",
        "version": "V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN58774946/index.html

www.soliton.co.jp/support/2021/004334.html