CVE Vulnerability Advisory Database

[Affected Scope] Systems running unpatched versions impacted by CVE-2021-32030

[Impact] The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authenticatio...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Dell client platforms and firmware update utilities utilizing the dbutil_2_3.sys driver version 2.3

[Impact] Local authenticated attackers can bypass access controls to directly read/write kernel memory, leading to full SYSTEM privilege escalation, denial of service (BSOD), or information disclosure

[Mitigation] Immediately remediate by deleting the vulnerable dbutil_2_3.sys driver file and upgrading to the patched firmware update utility per Dell Advisory DSA-2021-088

[Affected Scope] Ubuntu Linux kernel versions with unprivileged user namespaces and OverlayFS mounting enabled

[Impact] A local unprivileged attacker can exploit improper file capability validation to gain full root privileges on the host

[Mitigation] Upgrade to the latest patched Ubuntu kernel and reboot, or temporarily disable unprivileged user namespaces

[Affected Scope] QNAP QTS (prior to 4.5.2, 4.5.1, 4.3.6, 4.3.4, 4.3.3, 4.2.6) and QuTS hero (prior to h4.5.1)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges on the compromised NAS device

[Mitigation] Immediately upgrade QNAP firmware to the patched versions and restrict external internet access to the NAS management interface

[Affected Scope] Systems running macOS Big Sur prior to 11.2, Catalina/Mojave without Security Update 2021-001, iOS/iPadOS prior to 14.4, tvOS prior to 14.4, watchOS prior to 7.3, and Safari prior to 14.0.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) within the context of the browser process

[Mitigation] Immediately apply official Apple software updates to upgrade to patched versions (macOS 11.2, iOS 14.4, Safari 14.0.3, etc.)

[Affected Scope] Samsung mobile devices with DSP (Digital Signal Processor) driver prior to SMR Mar-2021 Release 1

[Impact] Local attackers can exploit improper boundary checks to gain out-of-bounds memory access, leading to local privilege escalation and arbitrary code execution in kernel space

[Mitigation] Apply the official Samsung security update to SMR Mar-2021 Release 1 or later

[Affected Scope] Samsung devices equipped with DSP (Digital Signal Processor) driver prior to SMR (Security Maintenance Release) Mar-2021 Release 1

[Impact] A local attacker with high privileges can load arbitrary ELF libraries inside the DSP subsystem, potentially leading to complete system compromise and evasion of OS-level security controls

[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)

[Affected Scope] Samsung mobile devices with DPU (Display Processing Unit) driver prior to SMR (Samsung Maintenance Release) Mar-2021 Release 1

[Impact] A local attacker with high privileges can trigger improper file descriptor handling, leading to kernel memory corruption and system-wide kernel panic (DoS/LPE)

[Mitigation] Immediately apply the official Samsung Android security update (SMR March 2021 Release 1 or later)

[Affected Scope] Samsung Android devices prior to SMR (Samsung Maintenance Release) March 2021 Release 1

[Impact] Local attackers can bypass critical kernel protections like KASLR by reading sensitive kernel memory addresses and structures from the improperly secured sec_log file

[Mitigation] Apply the official Samsung SMR March 2021 Release 1 (or later) firmware update immediately, or restrict access permissions to the debug log node

[Affected Scope] Samsung mobile devices running software versions prior to SMR (Samsung Security Maintenance Release) Mar-2021 Release 1

[Impact] Untrusted local applications can bypass sandbox boundaries to read or write sensitive local files, potentially leading to data theft or privilege escalation

[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)

[Affected Scope] Rockwell Automation Studio 5000 Logix Designer v21 and later, RSLogix 5000 v16 through v20, and associated Logix controllers

[Impact] Unauthenticated remote attackers can obtain the hardcoded cryptographic key, bypass verification mechanisms, and gain unauthorized access to modify controller logic or configurations

[Mitigation] Implement network segmentation, restrict EtherNet/IP ports, transition controller keyswitches to 'Run' mode, and deploy CIP Security where applicable

[Affected Scope] Veritas Backup Exec versions prior to 21.2 (Remote Agent)

[Impact] Attackers can bypass authentication via flaws in the SHA authentication scheme and execute arbitrary commands with SYSTEM privileges

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict external access to the NDMP port (TCP 10000)

[Affected Scope] Veritas Backup Exec Agent versions prior to 21.2 (Windows/Linux)

[Impact] Remote attackers can bypass authentication to gain unauthorized access to the Agent and execute privileged commands with SYSTEM/root privileges

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, or restrict network access to the Agent port (default TCP 10000)

[Affected Scope] Veritas Backup Exec Remote Agent installed on Windows and Linux systems prior to version 21.2

[Impact] Attackers can bypass authentication via flaws in the SHA Authentication scheme, gaining unauthorized access to execute data management commands with System privileges, leading to arbitrary file access and remote code execution

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict network access to the NDMP port (TCP 10000)

[Affected Scope] Adminer versions 4.0.0 up to (but excluding) 4.7.9, specifically when using the bundled driver package (e.g., adminer.php)

[Impact] Unauthenticated remote attackers can abuse the system to scan internal networks, probe private ports, and access sensitive internal APIs or cloud metadata services (IMDS)

[Mitigation] Immediately upgrade Adminer to version 4.7.9 or higher, and restrict access to the Adminer interface using network-level controls

[Affected Scope] QNAP QTS operating system and Helpdesk application versions prior to 3.0.3

[Impact] Unauthenticated remote attackers can exploit improper access control to gain elevated privileges or read sensitive system information

[Mitigation] Immediately update the QTS operating system and upgrade the Helpdesk application to version 3.0.3 or later

[Affected Scope] Unix-like operating systems running Sudo versions 1.8.2 through 1.8.31p2, and 1.9.0 through 1.9.5p1

[Impact] A local non-privileged attacker can exploit this vulnerability via 'sudoedit -s' with a trailing backslash to escalate privileges to root

[Mitigation] Immediately upgrade Sudo to version 1.9.5p2 or later, or restrict execution permissions for sudoedit as a temporary workaround

[Affected Scope] ONLYOFFICE Document Server versions prior to 5.6.3 (when JWT is enabled)

[Impact] Attackers can achieve Remote Code Execution (RCE) by uploading malicious files to arbitrary directories.

[Mitigation] Immediately update ONLYOFFICE Document Server to version 5.6.3 or later.

[Affected Scope] PHP applications and frameworks (including Drupal) utilizing PEAR Archive_Tar versions 1.4.11 and prior

[Impact] Remote attackers can exploit inadequate symbolic link validation to perform directory traversal, writing arbitrary files to the system and potentially achieving Remote Code Execution (RCE)

[Mitigation] Immediately upgrade the PEAR Archive_Tar package to version 1.4.12 or higher, and restrict archive file uploads and extraction paths

[Affected Scope] Laravel applications running versions prior to 8.4.2 and utilizing facade/ignition versions prior to 2.5.2 with debug mode (APP_DEBUG=true) enabled

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code on the target server, leading to complete system compromise and data exfiltration

[Mitigation] Upgrade the facade/ignition package to version 2.5.2 or higher, and ensure that Laravel debug mode (APP_DEBUG) is set to 'false' in production environments