CVE-2021-20790 : Improper control of program execution vulnerability in RevoWorks Browser 2.1.230

Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors.

Published 2021-09-17 02:15:07

Updated 2022-07-12 17:42:04

Source JPCERT/CC

View at NVD, CVE.org

Products affected by CVE-2021-20790

Jscom » Revoworks Browser
Versions from including (>=) 2.1.197 and up to, including, (<=) 2.1.230
cpe:2.3:a:jscom:revoworks_browser:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-20790

EPSS FAQ

0.63%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 68 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-20790

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.6	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	2.8	6.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: High Integrity: High Availability: High

References for CVE-2021-20790

https://jscom.jp/news-20210910_2/

【重要】RevoWorks Browser の複数の脆弱性（CVE-2021-20790、CVE-2021-20791）に関する注意喚起 | ジェイズ・コミュニケーション
Vendor Advisory

CVEs referencing this url
https://jvn.jp/en/jp/JVN81658818/index.html

JVN#81658818: Multiple vulnerabilities in RevoWorks Browser
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-20790

Products affected by CVE-2021-20790

Exploit prediction scoring system (EPSS) score for CVE-2021-20790

CVSS scores for CVE-2021-20790

References for CVE-2021-20790