CVE-2021-40397 - A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9

Back Back to CVE browser

HIGH

A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9

Published Jan 28, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.87%

Description

A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-27574
Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1409
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-27574		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1409		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Jan 28, 2022

Updated Apr 15, 2025

Reserved Sep 1, 2021

Link CVE-2021-40397

CISA Vulnrichment

Updated Apr 15, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-40397

Red Hat

No data

ENISA EUVD

Assigner talos

Published Jan 28, 2022

Updated Apr 15, 2025

Link EUVD-2021-27574

GitHub

No data