1. Home
  2. CVE Database
  3. CVE-2021-26639
HIGH · 8.1

CVE-2021-26639

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server withou...

Vulnerability Description

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
WisaSmart Wing Cms< r18715.20211229
LinuxLinux Kernel-

Related Weaknesses (CWE)

CWE-20CWE-494

References

FAQ

What is CVE-2021-26639?

CVE-2021-26639 is a vulnerability with a CVSS score of 8.1 (HIGH). This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server withou...

How severe is CVE-2021-26639?

CVE-2021-26639 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-26639?

Check the references section above for vendor advisories and patch information. Affected products include: Wisa Smart Wing Cms, Linux Linux Kernel.