1. Home
  2. CVE Database
  3. CVE-2021-31926
MEDIUM · 6.5

CVE-2021-31926

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the ...

Vulnerability Description

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
CubecodersAmp>= 2.1.0, < 2.1.1.2

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2021-31926?

CVE-2021-31926 is a vulnerability with a CVSS score of 6.5 (MEDIUM). AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the ...

How severe is CVE-2021-31926?

CVE-2021-31926 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-31926?

Check the references section above for vendor advisories and patch information. Affected products include: Cubecoders Amp.