CVE-2021-42257
PoC ×2—CVSS 3.1
7.1 high
EPSS
<1%p32
Published
()
Modified
Description
check_smart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path (the /dev/bus substring and a number), aka an unanchored regular expression.
- Vendors
- check smart project
- Products
- check smart
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.