CVEvulnerability
CVE-2021-39273
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-276
Description
In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges.
Affected configurations
• xerosecurity sn1per 9.0
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://github.com/1N3/Sn1per/issues/358 Exploit, Third Party Advisory
- https://github.com/1N3/Sn1per/releases Release Notes, Third Party Advisory
- https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274 Exploit, Third Party Advisory
- https://github.com/1N3/Sn1per/issues/358 Exploit, Third Party Advisory
- https://github.com/1N3/Sn1per/releases Release Notes, Third Party Advisory
- https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274 Exploit, Third Party Advisory