PT-2021-17455 · Mu320E · Mu320E

Published 2021-03-25 · Updated 2021-03-29 · CVE-2021-27448

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MU320E versions prior to v04A00.1

Description A miscommunication in the file system allows adversaries with access to escalate privileges.

Recommendations For versions prior to v04A00.1, update to version v04A00.1 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-250

CWE-269

Related Identifiers

CVE-2021-27448

Affected Products

Mu320E

References · 3

• https://osv.dev/vulnerability/CVE-2021-27448 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27448 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02 · Note