← Database

CVE-2021-40376

HIGH CVSS: 7.8 Published: 2022-03-10 Modified: 2026-06-17

Description

otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000.

Affected Platforms

Otris Update Manager

Weakness Type

CWE-287

References