CVE-2021-40389: High severity advantech deviceon/iedge vulnerability

Published Jan 28, 2022

Updated

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Advantech Deviceon\/iedge=1.0.2

Event History

Jan 28, 2022

CVE Published

via MITRE·07:09 PM

Data Sourced

via MITRE·07:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-40389?

The severity of CVE-2021-40389 is high.

What software is affected by CVE-2021-40389?

Advantech DeviceOn/iEdge Server version 1.0.2 is affected by CVE-2021-40389.

How does CVE-2021-40389 work?

CVE-2021-40389 is a privilege escalation vulnerability that allows an attacker to replace a specific file in the system to gain NT SYSTEM privileges.

How can I fix CVE-2021-40389?

To fix CVE-2021-40389, it is recommended to update to a patched version of Advantech DeviceOn/iEdge Server.

Where can I find more information about CVE-2021-40389?

More information about CVE-2021-40389 can be found at https://talosintelligence.com/vulnerability_reports/TALOS-2021-1400.