CVE-2021-40376 Auth bypass in n/a
Local attackers can gain SYSTEM privileges via unauthenticated named pipe calls, with potential remote exploitation via HTTP.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-40376?
CVE-2021-40376 is a high-severity authentication bypass vulnerability in n/a, published on 7 Mar 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000.
Weakness: CWE-287
Which versions are affected by CVE-2021-40376?
It affects 1 product.
Products include Otris Update Manager.
How do I fix CVE-2021-40376?
No fix has been published for CVE-2021-40376 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-40376 being exploited?
There is no known exploitation of CVE-2021-40376 in the wild and no public exploit code.
Sources
Also known as GHSA-9x8w-8g8p-2qgx.