Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-33393

lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the ownership/permissions of other files may be present as well.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.726
EPSS Ranking 98.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
Products affected by CVE-2021-33393
  • Ipfire » Ipfire » Version: 1.49
    cpe:2.3:a:ipfire:ipfire:1.49
  • Ipfire » Ipfire » Version: 2.1
    cpe:2.3:a:ipfire:ipfire:2.1
  • Ipfire » Ipfire » Version: 2.11
    cpe:2.3:a:ipfire:ipfire:2.11
  • Ipfire » Ipfire » Version: 2.13
    cpe:2.3:a:ipfire:ipfire:2.13
  • Ipfire » Ipfire » Version: 2.15
    cpe:2.3:a:ipfire:ipfire:2.15
  • Ipfire » Ipfire » Version: 2.17
    cpe:2.3:a:ipfire:ipfire:2.17
  • Ipfire » Ipfire » Version: 2.19
    cpe:2.3:a:ipfire:ipfire:2.19
  • Ipfire » Ipfire » Version: 2.21
    cpe:2.3:a:ipfire:ipfire:2.21
  • Ipfire » Ipfire » Version: 2.23
    cpe:2.3:a:ipfire:ipfire:2.23
  • Ipfire » Ipfire » Version: 2.25
    cpe:2.3:a:ipfire:ipfire:2.25


Products
Pricing
Contact Us

Shodan ® - All rights reserved