CVE-2021-27236

Critical

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be…

mitre·CWE-668·Published 2021-02-16

CVSS

9.8

EPSS

0.02

KEV

Exploits

cve.orgen

177 chars

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.

NVDen

177 chars

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.

Se detectó un problema en Mutare Voice (EVM) versiones 3.x anteriores a 3.3.8. El archivo getfile.asp permite una Inclusión de Archivos Locales No Autenticados, que puede ser aprovechada para lograr una Ejecución de Código Remota

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H