CVE-2021-26622criticalCWE-20

CVE-2021-26622: critical vulnerability in Genians Co., Ltd Genian NAC Suite V4.0

Genian NAC remote code execution vulnerability

Published · Updated

Follow this CVE+ Monitor Genian NAC+ Monitor Genian NAC Suite

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.6epss 3.0%
An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Genians Co., Ltd · Genian NAC Suite V4.0Genians Co., Ltd · Genian NAC V5.0 & Genian NAC Suite V5.0