CVE-2021-27235: Medium severity Mutare Voice vulnerability
Published Feb 16, 2021
·Updated
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database.
Affected Software
1 affected component
Mutare Voice>=3.2.6<3.3.8
Event History
Feb 16, 2021
CVE Published
via MITRE·03:43 AM
Data Sourced
via MITRE·03:43 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-27235?
The severity of CVE-2021-27235 is categorized as high due to unauthorized database access.
2
How do I fix CVE-2021-27235?
To fix CVE-2021-27235, you should upgrade Mutare Voice to version 3.3.8 or later.
3
What kind of data can be accessed due to CVE-2021-27235?
CVE-2021-27235 allows unauthorized users to export entire database tables from the admin portal.
4
Is CVE-2021-27235 present in all versions of Mutare Voice?
CVE-2021-27235 affects all versions of Mutare Voice from 3.2.6 to 3.3.7.
5
Who is affected by CVE-2021-27235?
Any organization using affected versions of Mutare Voice is at risk from CVE-2021-27235.