PT-2021-15223 · Hgiga Eip · Hgiga Eip

Jia-Rong Chen · CVE-2021-22850 · Published 2021-01-19 · Updated 2022-10-25

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HGiga EIP product (affected versions not specified)

Description The issue is related to ineffective access control in certain pages of the HGiga EIP product, allowing attackers to access the database or perform privileged functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Incorrect Permission

Weakness Enumeration

CWE-306

CWE-732

Related Identifiers

CVE-2021-22850

Affected Products

Hgiga Eip

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22850 · Security Note
• https://twcert.org.tw/tw/cp-132-4326-3d9d2-1.html · Note
• https://chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef · Note
• https://t.me/cvenotify/8665 · Telegram Post