Security Vulnerabilities - CVEs Published In September 2021
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots.
CVSS Score
5.5
EPSS Score
0.002
Published
2021-09-15
CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.08
Published
2021-09-15
CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Known exploited
CVSS Score
9.8
EPSS Score
0.999
Published
2021-09-15
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.8
EPSS Score
0.114
Published
2021-09-15
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Known exploited
CVSS Score
7.0
EPSS Score
0.029
Published
2021-09-15
Microsoft Office Spoofing Vulnerability
CVSS Score
7.6
EPSS Score
0.016
Published
2021-09-15
Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score
7.6
EPSS Score
0.013
Published
2021-09-15
Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score
7.6
EPSS Score
0.013
Published
2021-09-15
Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.063
Published
2021-09-15
Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.063
Published
2021-09-15