CVE-2021-27236: Critical severity Mutare Voice vulnerability
Published Feb 16, 2021
·Updated
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.
Affected Software
1 affected component
Mutare Voice>=3.0.0<3.3.8
Event History
Feb 16, 2021
CVE Published
via MITRE·03:43 AM
Data Sourced
via MITRE·03:43 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-27236?
CVE-2021-27236 is classified as a critical vulnerability due to its potential for unauthenticated local file inclusion leading to remote code execution.
2
How do I fix CVE-2021-27236?
To fix CVE-2021-27236, upgrade Mutare Voice to version 3.3.8 or later.
3
What are the risks associated with CVE-2021-27236?
The risks associated with CVE-2021-27236 include unauthorized access to the system and the ability to execute arbitrary code remotely.
4
Which versions of Mutare Voice are affected by CVE-2021-27236?
Mutare Voice versions 3.0.0 to 3.3.7 are affected by CVE-2021-27236.
5
Can CVE-2021-27236 be exploited without authentication?
Yes, CVE-2021-27236 can be exploited without authentication, making it particularly dangerous.