Lucene search

K
cvelistMitreCVELIST:CVE-2021-36356
HistoryAug 31, 2021 - 3:45 a.m.

CVE-2021-36356

2021-08-3103:45:11
mitre
www.cve.org
4
kramer viaware
remote code execution
ajaxpages/writebrowsefilepathajax.php
cve-2021-36356

AI Score

10

Confidence

High

EPSS

0.884

Percentile

98.8%

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). NOTE: this issue exists because of an incomplete fix for CVE-2019-17124.

AI Score

10

Confidence

High

EPSS

0.884

Percentile

98.8%