CVEvulnerability
CVE-2021-33214
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-276
Description
In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation.
Affected configurations
• hms-networks ecatcher (<= 6.6.4)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4 Vendor Advisory
- https://labs.bishopfox.com/advisories Third Party Advisory
- https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4 Exploit, Third Party Advisory
- https://www.ewon.biz/about-us/security Vendor Advisory
- https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher Vendor Advisory
- https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4 Vendor Advisory
- https://labs.bishopfox.com/advisories Third Party Advisory
- https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4 Exploit, Third Party Advisory
- https://www.ewon.biz/about-us/security Vendor Advisory
- https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcher Vendor Advisory