CVE-2021-30110

High

Description

dttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed response to the UDP query used to check for updates.

SeverityHigh
CVSS7.5
Exploit probability—
ProductGreyware Domain Time Ii
PublishedJul 22, 2021
First seenJul 22, 2021

How to fix

Update
  • greyware domain_time_ii5.2.b.20210331 or later

Affected products

ProductAffected versionsFixed in
greyware domain_time_iiv < 5.2.b.202103315.2.b.20210331

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.