Lucene search

IcscertCVELIST:CVE-2021-42701

HistoryNov 05, 2021 - 3:39 p.m.

CVE-2021-42701 AzeoTech DAQFactory

2021-11-0515:39:27

CWE-471

icscert

www.cve.org

azeotech daqfactory

exploit

project file

man in the middle

cloud connections

user credentials

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle (MiTM) attack. This could allow an attacker to obtain credentials and take over the user’s cloud account.

CNA Affected

[
  {
    "product": "DAQFactory",
    "vendor": "AzeoTech",
    "versions": [
      {
        "lessThanOrEqual": "New version",
        "status": "affected",
        "version": "All versions",
        "versionType": "custom"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-308-02

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

Related for CVELIST:CVE-2021-42701