CVE-2021-41547CWE-22

CVE-2021-41547: falha em Siemens Teamcenter Active Workspace V4.3

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Teamcenter Active Workspace

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.1%
A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.11), Teamcenter Active Workspace V5.0 (All versions < V5.0.10), Teamcenter Active Workspace V5.1 (All versions < V5.1.6), Teamcenter Active Workspace V5.2 (All versions < V5.2.3). The application contains an unsafe unzipping pattern that could lead to a zip path traversal attack. This could allow and attacker to execute a remote shell with admin rights.
Produtos afetados
Siemens · Teamcenter Active Workspace V4.3Siemens · Teamcenter Active Workspace V5.0Siemens · Teamcenter Active Workspace V5.1Siemens · Teamcenter Active Workspace V5.2
CVEs relacionadas — Siemens Teamcenter Active Workspace V4.3

No mesmo produto, das mais perigosas para as menos.

CVE-2021-40357—CVE-2021-40357EPSS 1.2%CVE-2021-33709—CVE-2021-33709EPSS 0.9%CVE-2021-33711—CVE-2021-33711EPSS 0.8%CVE-2021-33710—CVE-2021-33710EPSS 0.6%