Description

Kramer VIAware allows an unauthenticated user to upload arbitrary files. An attacker can exploit it to achieve remote code execution.

Remediation

Upgrade to the latest version of Kramer VIAware

References

CVE-2021-36356 Detail

CVE-2021-36356 Unauthenticated Remote Code Execution in VIAware

Related Vulnerabilities

SharePoint CVE-2020-1583 Vulnerability (CVE-2020-1583)

Oracle Database Server CVE-2012-0525 Vulnerability (CVE-2012-0525)

Python Integer Overflow or Wraparound Vulnerability (CVE-2018-20406)

Oracle Database Server CVE-2009-1015 Vulnerability (CVE-2009-1015)

Moodle Other Vulnerability (CVE-2006-4943)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Unauthenticated File Upload Code Execution Known Vulnerabilities CWE-434 CVE-2021-36356 CVE-2019-17124 CVE-2021-35064