CVE-2021-27194

—

CVSS 3.1

8.8 high

EPSS

<1%p30

Published

Mar 25, 2021 (Mar 25, 2021)

Modified

Jun 17, 2026

Description

Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords.

Vendors: netop
Products: vision pro
Weakness: CWE-319
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news2 stories

Popular Netop Remote Learning Software Found Vulnerable to Hacking

The Hacker NewsApr 9, 12:01 UTC · Apr 9, 2021Ransomware CVE-2021-27192 CVE-2021-27193 CVE-2021-27194+1 CVEs

Abusing distance learning software to hack into student PCs

Security AffairsMar 22, 17:11 UTC · Mar 22, 2021Vulnerability CVE-2021-27192 CVE-2021-27193 CVE-2021-27194+1 CVEs