CVE-2021-45917
High
Description
The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service.
SeverityHigh
CVSS8.0
Exploit probability—
ProductSun Moon Jingyao Network Computer Terminal Protection System Firmware
PublishedJan 3, 2022
First seenJan 3, 2022
Weakness typeCWE-287Improper authentication
How to fix
Update
- sun_moon_jingyao network_computer_terminal_protection_system_firmware7.20.0401 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun_moon_jingyao network_computer_terminal_protection_system_firmware | v < 7.20.0401 | 7.20.0401 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.