Vulnerability · Published Mar 18, 2021 · Assigned by jpcert
CVE-2021-20676
Medium 4.3
In plain English
A medium-severity security flaw in M-System DL8 series from M-System Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS NVD)4.3Medium
Exploit odds (30 days)0.8%top 43.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
M-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0) allows remote authenticated attackers to bypass access restriction and conduct prohibited operations via unspecified vectors.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| M-System Co., Ltd. | M-System DL8 series | type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0 |
References
- https://www.m-system.co.jp/download_w/dl_dl8updaterE.html x_refsource_MISC
- https://jvn.jp/en/jp/JVN47497535/index.html x_refsource_MISC