PT-2021-21903 · Benq · Benq Smart Wireless Conference Projector

Benq · Published 2021-08-30 · Updated 2021-09-10 · CVE-2021-37911

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: BenQ smart wireless conference projector (affected versions not specified)

Description: The management interface of the BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if they enter the local subnetwork.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-37911

Affected Products

Benq Smart Wireless Conference Projector

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-37911 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37911 · Vendor Advisory
• https://t.me/cibsecurity/28005 · Telegram Post
• https://twcert.org.tw/tw/cp-132-5047-7ef35-1.html · Note