CVE-2021-38289

An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

1.45% chance of exploitation in the next 30 days, 71th percentile

Published

2022-07-12

Updated

2026-04-07

Proof-of-concept exploits (1)

• viperbluff/Novastar-VNNOX-iCare-Privilege-Escalation1★ · 2021-08-09

References

• CVE Record
• NVD entry

Related

• CVE-2021-38283
• CVE-2021-3829
• CVE-2021-3828
• CVE-2021-38291
• CVE-2021-38278
• CVE-2021-38294