CVE-2021-26634

SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server management rights using a web shell.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746	Broken Link Third Party Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746	Broken Link Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:maxb:maxboard:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:56

Type	Values Removed	Values Added
References	~~() https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746 - Broken Link, Third Party Advisory~~	() https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746 - Broken Link, Third Party Advisory

26 Jun 2023, 17:59

Type	Values Removed	Values Added
CWE	~~CWE-20~~	CWE-434
References	~~(MISC) https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746 - Third Party Advisory~~	(MISC) https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746 - Broken Link, Third Party Advisory

Information

Published : 2022-06-02 14:15

Updated : 2024-11-21 05:56

NVD link : CVE-2021-26634

Mitre link : CVE-2021-26634

CVE.ORG link : CVE-2021-26634

JSON object : View

Products Affected

maxb

maxboard

linux

linux_kernel

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-288

Authentication Bypass Using an Alternate Path or Channel

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2021-26634", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "vuln@krcert.or.kr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-06-02T14:15:28.243", "references": [{"url": "https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746", "tags": ["Broken Link", "Third Party Advisory"], "source": "vuln@krcert.or.kr"}, {"url": "https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746", "tags": ["Broken Link", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "vuln@krcert.or.kr", "description": [{"lang": "en", "value": "CWE-89"}, {"lang": "en", "value": "CWE-288"}, {"lang": "en", "value": "CWE-434"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server management rights using a web shell."}, {"lang": "es", "value": "Unos ataques de inyecci\u00f3n SQL y de carga de archivos son posibles debido a la insuficiente comprobaci\u00f3n de los valores de entrada en algunos par\u00e1metros y variables de los archivos que comprometen a Maxboard, lo que puede conllevar a una ejecuci\u00f3n de c\u00f3digo arbitrario o la escalada de privilegios. Los atacantes pueden usar estas vulnerabilidades para llevar a cabo ataques como el robo de derechos de administraci\u00f3n del servidor usando un shell web"}], "lastModified": "2024-11-21T05:56:38.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:maxb:maxboard:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFA3A850-B210-40BD-A12B-5EACD978EA28", "versionEndExcluding": "1.9.6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vuln@krcert.or.kr"}