PT-2021-22499 · Orbiteam · Bscw Classic

Armin Stock · Published 2021-08-30 · Updated 2021-09-06 · CVE-2021-39271

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OrbiTeam BSCW Classic versions prior to 5.0.12 OrbiTeam BSCW Classic versions prior to 5.1.10 OrbiTeam BSCW Classic versions prior to 5.2.4 OrbiTeam BSCW Classic versions prior to 7.3.3 OrbiTeam BSCW Classic versions prior to 7.4.3

Description The issue allows authenticated remote code execution (RCE) during archive extraction via attacker-supplied Python code in the class attribute of a .bscw file.

Recommendations For versions prior to 5.0.12, update to version 5.0.12 or later. For versions prior to 5.1.10, update to version 5.1.10 or later. For versions prior to 5.2.4, update to version 5.2.4 or later. For versions prior to 7.3.3, update to version 7.3.3 or later. For versions prior to 7.4.3, update to version 7.4.3 or later.

Exploit

Fix

Related Identifiers

CVE-2021-39271

Affected Products

Bscw Classic

References · 10

• 🔥 https://seclists.org/fulldisclosure/2021/Aug/24 · Exploit
• 🔥 http://packetstormsecurity.com/files/163989/BSCW-Server-Remote-Code-Execution.html · Exploit
• https://bscw.de/en/company · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39271 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39271 · Vendor Advisory
• https://t.me/cvenotify/20349 · Telegram Post
• https://t.me/cibsecurity/27998 · Telegram Post
• https://t.me/defcon_news/84370 · Telegram Post
• https://t.me/cvenotify/20549 · Telegram Post
• https://t.me/cvenotify/20325 · Telegram Post