1. Home
  2. CVE Database
  3. CVE-2021-26612
HIGH · 8.1

CVE-2021-26612

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation...

Vulnerability Description

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
TobesoftNexacro<= 17.1.2.500
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2021-26612?

CVE-2021-26612 is a vulnerability with a CVSS score of 8.1 (HIGH). An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation...

How severe is CVE-2021-26612?

CVE-2021-26612 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-26612?

Check the references section above for vendor advisories and patch information. Affected products include: Tobesoft Nexacro, Microsoft Windows.