CVE-2021-35064 Privilege escalation in n/a
Attackers can escalate privileges on KramerAV VIAWare systems due to insecure sudo configurations allowing execution of dangerous commands.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-35064?
CVE-2021-35064 is a critical vulnerability in n/a, published on 12 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg.
Weakness: CWE-269
Which versions are affected by CVE-2021-35064?
It affects 1 product.
Products include Kramerav Viaware.
How do I fix CVE-2021-35064?
No fix has been published for CVE-2021-35064 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-35064 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-35064 exists.
Public exploit code: 1 Exploit-DB entry, 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qw8w-2g6w-j99h.