CVE-2021-20676
Medium
Description
M-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0) allows remote authenticated attackers to bypass access restriction and conduct prohibited operations via unspecified vectors.
SeverityMedium
CVSS4.3
Exploit probability—
ProductM-system Dl8-a Firmware
PublishedMar 18, 2021
First seenMar 18, 2021
How to fix
Update
- m-system dl8-a_firmware3.0.81 or later
- m-system dl8-b_firmware3.0.77 or later
- m-system dl8-c_firmware3.0.99 or later
- m-system dl8-d_firmware3.0.91 or later
- m-system dl8-e_firmware3.0.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| m-system dl8-a_firmware | v < 3.0.81 | 3.0.81 |
| m-system dl8-b_firmware | v < 3.0.77 | 3.0.77 |
| m-system dl8-c_firmware | v < 3.0.99 | 3.0.99 |
| m-system dl8-d_firmware | v < 3.0.91 | 3.0.91 |
| m-system dl8-e_firmware | v < 3.0.12 | 3.0.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.