PT-2022-12234 · Unknown · Single Connect

Gokhan Sahin · Published 2022-01-27 · Updated 2026-05-18 · CVE-2021-44793

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Single Connect (affected versions not specified)

Description The issue arises from the lack of an authorization check in the sc-reports-ui module, allowing a remote attacker to access the device configuration page and export data to an external file. This could lead to the attacker obtaining sensitive information, including database credentials. Since the database operates with high privileges, the attacker might be able to execute commands using the obtained credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-44793

Affected Products

Single Connect

References · 7

• https://osv.dev/vulnerability/CVE-2021-44793 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44793 · Security Note
• https://t.me/cvenotify/94870 · Telegram Post
• https://usom.gov.tr/bildirim/tr-22-0093 · Note
• https://t.me/cibsecurity/36382 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0093 · Note
• https://t.me/cveNotify/163844 · Telegram Post