CVE-2021-22908

A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

69.38% chance of exploitation in the next 30 days, 99th percentile

Published

2021-05-27

Updated

2024-08-03

Exploit collections (1)

• helloexp/0day/tree/master/00-CVE_EXP/cve-2021-22908

References

• CVE Record
• NVD entry

Related

• CVE-2021-22898
• CVE-2021-2291
• CVE-2021-22893
• CVE-2021-22911
• CVE-2021-22881
• CVE-2021-22924