CVE-2021-37207
Summary
| CVE | CVE-2021-37207 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-11-09 12:15:00 UTC |
| Updated | 2021-11-11 02:34:00 UTC |
| Description | A vulnerability has been identified in SENTRON powermanager V3 (All versions). The affected application assigns improper access rights to a specific folder containing configuration files. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges. |
NVD Known Affected Configurations (CPE 2.3)
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590612 Siemens SENTRON powermanager Incorrect Permission Assignment for Critical Resource Vulnerability (ICSA-21-315-10)