CVE-2021-27454 Vulnerability Details

  /     /     /  

CVE-2021-27454 Metadata Quick Info

CVE Published: 25/03/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: icscert | Vendor: n/a | Product: Reason DR60
Status : PUBLISHED

---

CVE-2021-27454 Description

The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-250
CWE Name: EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).