Veille CVE

Septembre 2021

2 CVE

Critique 1 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2021-20035 6.5 Moyenne Exploitée

    SonicWall SMA100 · Sonicwall sma 200 firmware · Sonicwall sma 210 firmware · Sonicwall sma 400 firmware

    Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

  2. CVE-2021-36260 9.8 Critique Exploitée

    Hikvision ds-2cd2026g2-iu\/sl firmware · Hikvision ds-2cd2046g2-iu\/sl firmware · Hikvision ds-2cd2066g2-i\(u\) firmware · Hikvision ds-2cd2066g2-iu\/sl firmware

    A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.