CVE-2021-32964 — Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

CVE-2021-32964

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel PUBLISHED

Description (CNA)

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system.

Affected (CNA)

Vendor / product	Versions
AGG Software / Web Server (webserver.dll)	affected All through v4.0.40.1014

CWE

CWE-23

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-161-02

CISA-ADP

No English description supplied.

No references supplied.