Vulnerability · Published Sep 7, 2021 · Assigned by INCD

CVE-2021-36717Synerion TimeNet version 9.21 - Directory Traversal

Medium 5.4

In plain English

A medium-severity security flaw in TimeNet version from Synerion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.9%top 38.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more information required to further compromise the system.

Affected products (as reported)

Vendor	Product	Versions
Synerion	TimeNet version	TimeNet 9.21

References

INCD CVE Advisories third-party-advisory, x_refsource_CERT