Security Vulnerabilities - CVEs Published In September 2021
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-09-15
CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.649
Published
2021-09-15
CVE-2021-38647
Open Management Infrastructure Remote Code Execution Vulnerability
Known exploited
CVSS Score
9.8
EPSS Score
0.943
Published
2021-09-15
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.259
Published
2021-09-15
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.0
EPSS Score
0.167
Published
2021-09-15
Microsoft Office Spoofing Vulnerability
CVSS Score
7.6
EPSS Score
0.008
Published
2021-09-15
Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score
7.6
EPSS Score
0.011
Published
2021-09-15
Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score
7.6
EPSS Score
0.013
Published
2021-09-15
Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.082
Published
2021-09-15
Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.082
Published
2021-09-15