1. Home
  2. CVE Database
  3. CVE-2021-33210
MEDIUM · 4.3

CVE-2021-33210

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a pla...

Vulnerability Description

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
FimerAurora Vision< 2.97.10

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2021-33210?

CVE-2021-33210 is a vulnerability with a CVSS score of 4.3 (MEDIUM). An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a pla...

How severe is CVE-2021-33210?

CVE-2021-33210 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-33210?

Check the references section above for vendor advisories and patch information. Affected products include: Fimer Aurora Vision.