CVE-2021-27556: OS Command Injection
Published Aug 31, 2021
·Updated
The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type parameter to System.
Affected Software
1 affected component
EasyCorp ZenTao=12.5.3
Event History
Aug 31, 2021
CVE Published
via MITRE·02:38 AM
Data Sourced
via MITRE·02:38 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-27556.
2
What is the severity of CVE-2021-27556?
The severity of CVE-2021-27556 is critical with a score of 7.2.
3
How can remote attackers exploit CVE-2021-27556?
Remote attackers with admin access can exploit CVE-2021-27556 by setting the type parameter to System in the Cron job tab of EasyCorp ZenTao 12.5.3, allowing them to execute arbitrary code.
4
What is the affected software version?
The affected software version is EasyCorp ZenTao 12.5.3.
5
Is there any fix available for CVE-2021-27556?
Currently, there is no information about a fix available for CVE-2021-27556. It is recommended to follow the official EasyCorp ZenTao website or security advisories for updates and patches.