PT-2022-9767 · Tooffice · Tooffice

Published 2022-02-18 · Updated 2022-02-26 · CVE-2021-26618

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ToOffice (affected versions not specified)

Description An issue with improper input validation has been found, leading to the ability to create arbitrary files. This can be exploited by remote attackers to execute malicious code included in these files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-26618

Affected Products

Tooffice

References · 4

• https://osv.dev/vulnerability/CVE-2021-26618 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26618 · Security Note
• https://t.me/cvenotify/27412 · Telegram Post
• https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36456 · Note