PT-2021-20084 · Hms · Hms Ewon Ecatcher

Priyank Nigam · Published 2021-07-09 · Updated 2021-09-21 · CVE-2021-33214

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions HMS Ewon eCatcher versions through 6.6.4

Description The issue is related to weak filesystem permissions, which could allow malicious users to access files. This access could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation.

Recommendations For HMS Ewon eCatcher versions through 6.6.4, update to a version later than 6.6.4 to resolve the issue.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-33214

Affected Products

Hms Ewon Ecatcher

References · 9

• 🔥 https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4 · Exploit
• https://ewon.biz/about-us/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33214 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33214 · Vendor Advisory
• https://ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher · Vendor Advisory
• https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4 · Vendor Advisory
• https://t.me/cvenotify/17391 · Telegram Post
• https://t.me/cvenotify/19535 · Telegram Post
• https://labs.bishopfox.com/advisories · Note