Back to feed
EUVD-2021-19926 · Published Jul 9, 2021
In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation.
Technologies
Hms-Networks Ecatcher
Weaknesses
CWE-276
CVSS scores
- v3.16.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H - v2.06.0
AV:N/AC:M/Au:S/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Execution Stealth Discovery
References
- https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4
- https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4
- https://labs.bishopfox.com/advisories
- https://www.ewon.biz/about-us/security
- https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher
Potentially impacted assets
See if this affects your attack surface
