PT-2021-23335 · Snow · Snow Snow Agent For Windows

Vp40 · Published 2021-11-03 · Updated 2021-11-05 · CVE-2021-41562

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Snow Snow Agent for Windows versions 5.0.0 through 6.7.1

Description A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files.

Recommendations For Snow Snow Agent for Windows versions 5.0.0 through 6.7.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-64

Related Identifiers

CVE-2021-41562

Affected Products

Snow Snow Agent For Windows

References · 4

• https://community.snowsoftware.com/s/group/0F91r000000QUhPCAW/news-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41562 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41562 · Vendor Advisory
• https://t.me/cibsecurity/31779 · Telegram Post