CVEvulnerability

CVE-2021-3341

7.5 HIGH Published 2021-01-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-22

Description

A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request.

Affected configurations

• dh2i dxenterprise (>= 19.5 <= 20.0.218) • dh2i dxodyssey (>= 19.5 <= 20.0.219)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References