VULNERABILITY INTELLIGENCE

CVE-2021-22784

CVSS score5.7 MEDIUM

EPSS probability12.08%

CISA KEVNot currently listed

Published2021-07-21

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system.

Weakness classification

cybersecurity@se.com: CWE-306

Primary references

cybersecurity@se.com — Product, Vendor Advisory
cybersecurity@se.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory