Vulnerability Description
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt Autodial function.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nchsoftware | Ivm Attendant | <= 5.12 |
Related Weaknesses (CWE)
References
- https://github.com/0xfml/poc/blob/main/NCH/IVM_5.12_RCE.mdThird Party Advisory
- https://www.nch.com.au/ivm/index.htmlProduct
- https://github.com/0xfml/poc/blob/main/NCH/IVM_5.12_RCE.mdThird Party Advisory
- https://www.nch.com.au/ivm/index.htmlProduct
FAQ
What is CVE-2021-37444?
CVE-2021-37444 is a vulnerability with a CVSS score of 8.8 (HIGH). NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows...
How severe is CVE-2021-37444?
CVE-2021-37444 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-37444?
Check the references section above for vendor advisories and patch information. Affected products include: Nchsoftware Ivm Attendant.