CVE-2021-27648

High

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before…

synology·CWE-610·Published 2021-04-28

CVSS

8.8

EPSS

0.03

KEV

Exploits

cve.orgen

220 chars

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors.

NVDen

220 chars

NVDes

262 chars

La referencia controlada externamente a un recurso en otra esfera en la funcionalidad quarantine en Synology Antivirus Essential versiones anteriores a 1.4.8-2801, permite a usuarios autenticados remoto alcanzar privilegios por medio de vectores no especificados

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.5	8.0	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
3.1	Primary	cve.org	9.0	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H