CVE-2021-33205
First published: Fri Jun 11 2021(Updated: )
Western Digital EdgeRover before 0.25 has an escalation of privileges vulnerability where a low privileged user could load malicious content into directories with higher privileges, because of how Node.js is used. An attacker can gain admin privileges and carry out malicious activities such as creating a fake library and stealing user credentials.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Westerndigital Edgerover | <0.25 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-33205?
CVE-2021-33205 is a vulnerability in Western Digital EdgeRover before version 0.25 that allows a low privileged user to escalate privileges and carry out malicious activities.
How severe is CVE-2021-33205?
CVE-2021-33205 has a severity rating of 8.8 (high).
How does CVE-2021-33205 impact Western Digital EdgeRover?
CVE-2021-33205 allows a low privileged user to load malicious content into directories with higher privileges in Western Digital EdgeRover before version 0.25, potentially leading to admin privileges and malicious activities.
What is the affected version of Western Digital EdgeRover?
The affected version of Western Digital EdgeRover is before version 0.25.
How can I fix CVE-2021-33205 in Western Digital EdgeRover?
To fix CVE-2021-33205 in Western Digital EdgeRover, it is recommended to update to version 0.25 or later.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/westerndigital
- canonical/westerndigital edgerover