CVE-2021-36307 high Priorität · verfolgen · 35 EPSS 0.009 · 60. Perzentil EPSS 0.9% Wahrscheinlichkeit 0.009 Perzentil 60. Perzentil EPSS · Exploit-Vorhersage — Wahrscheinlichkeit, dass diese CVE in den nächsten 30 Tagen ausgenutzt wird (0–1), sowie ihr Perzentilrang unter allen CVEs EU RU US grimoire priority P2 · Scheduled
0.90% (60th) EPSS
CVSS 8.5 · high
4 sources
cnnvd · enisa_euvd · fstec_bdu · nvd
EPSS · bewertet 2026-10-27
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system.
umfeld Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
v2.0 8.5 high AV:N/AC:M/Au:S/C:C/I:C/A:C CVSS v2.0 8.5 high Access Vector Network Access Complexity Medium Authentication Single Confidentiality Impact Complete Integrity Impact Complete Availability Impact Complete primary · NVD / NIST US Ausnutzbarkeit 6.8 · Auswirkung 10 v3.1 8.8 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 8.8 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High primary · NVD / NIST US Ausnutzbarkeit 2.8 · Auswirkung 5.9 v3.1 7.3 high AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS v3.1 7.3 high Access Vector Network Access Complexity Low secondary · FSTEC (BDU) RU v3.1 8.8 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 8.8 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High secondary · ENISA EU v3.1 8.8 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 8.8 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High secondary · security_alert@emc.com Ausnutzbarkeit 2.8 · Auswirkung 5.9 v3.1 8.1 high CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U CVSS v3.1 8.1 high Attack Vector Network Attack Complexity Low Privileges Required Low User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High secondary · CVSS-BT (t0sche) Weitere Namen und Kennungen dieser Entität.
Externe Belege — Patches, Meldungen, Analysen.
← zurück zur Suche