Vulnerability Details CVE-2021-31926
AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.8%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
Products affected by CVE-2021-31926
-
cpe:2.3:a:cubecoders:amp:2.1.0
-
cpe:2.3:a:cubecoders:amp:2.1.0.10
-
cpe:2.3:a:cubecoders:amp:2.1.0.12
-
cpe:2.3:a:cubecoders:amp:2.1.0.14
-
cpe:2.3:a:cubecoders:amp:2.1.0.2
-
cpe:2.3:a:cubecoders:amp:2.1.0.4
-
cpe:2.3:a:cubecoders:amp:2.1.0.6
-
cpe:2.3:a:cubecoders:amp:2.1.0.8
-
cpe:2.3:a:cubecoders:amp:2.1.1.0