CVE-2021-40397: Critical severity advantech wise-paas/ota vulnerability

Published Jan 28, 2022

Updated

A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Advantech Wise-paas\/ota=3.0.9

Event History

Jan 28, 2022

CVE Published

via MITRE·07:09 PM

Data Sourced

via MITRE·07:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-40397?

The severity of CVE-2021-40397 is critical.

How does the privilege escalation vulnerability in CVE-2021-40397 work?

The privilege escalation vulnerability in CVE-2021-40397 allows an attacker to replace a specially-crafted file in the system and escalate privileges to NT SYSTEM authority.

Which software is affected by CVE-2021-40397?

Advantech WISE-PaaS/OTA Server version 3.0.9 is affected by CVE-2021-40397.

How can I fix CVE-2021-40397?

Apply the necessary patch or upgrade to a fixed version (if available) provided by Advantech Wise-paas/ota.

Where can I find more information about CVE-2021-40397?

You can find more information about CVE-2021-40397 on the Talos Intelligence vulnerability report: [https://talosintelligence.com/vulnerability_reports/TALOS-2021-1409](https://talosintelligence.com/vulnerability_reports/TALOS-2021-1409).