Vulnerability · Published Feb 16, 2022 · Assigned by Snow
CVE-2021-4106Vulnerability in Snow Inventory Java Scanner
High 7.8
In plain English
A high-severity security flaw in Snow Inventory Java Scanner from SNOW. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 83.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow Inventory Java Scanner 1.0
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SNOW | Snow Inventory Java Scanner | 1.0 0 |
Weakness: CWE-691 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://community.snowsoftware.com/s/feed/0D5690000BObYdUCQV x_refsource_MISC