{"id":"CVE-2021-4463","state":"PUBLISHED","title":"Longjing Technology BEMS API <= 1.21 Remote Arbitrary File Download","description":"Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint. The 'fileName' parameter is not properly sanitized, allowing attackers to craft traversal sequences and access sensitive files outside the intended directory.","publishedAt":"2025-11-12T22:07:30.512Z","updatedAt":"2026-05-14T02:06:50.957Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Shenzhen Longjing Technology Co. Ltd. BEMS API"],"affected":[{"vendor":"Shenzhen Longjing Technology Co. Ltd.","product":"BEMS API","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.21","versionType":"custom"}]}],"references":["https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5657.php","https://www.exploit-db.com/exploits/50163","https://packetstormsecurity.com/files/163702","https://cxsecurity.com/issue/WLB-2021070173","https://exchange.xforce.ibmcloud.com/vulnerabilities/206477","https://web.archive.org/web/20220527162453/http://www.ljkj2012.com/","https://www.vulncheck.com/advisories/longjing-technology-bems-api-remote-arbitrary-file-download"],"weaknesses":["CWE-552","CWE-22"],"ingestedAt":"2026-10-29T19:49:23.890Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/4xxx/CVE-2021-4463.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2021-4463","state":"PUBLISHED","datePublished":"2025-11-12T22:07:30.512Z","dateUpdated":"2026-05-14T02:06:50.957Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2025-11-12T20:55:39.039Z"},"containers":{"cna":{"title":"Longjing Technology BEMS API <= 1.21 Remote Arbitrary File Download","descriptions":[{"lang":"en","value":"Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint. The 'fileName' parameter is not properly sanitized, allowing attackers to craft traversal sequences and access sensitive files outside the intended directory."}],"affected":[{"vendor":"Shenzhen Longjing Technology Co. Ltd.","product":"BEMS API","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.21","versionType":"custom"}]}],"references":[{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5657.php","tags":["technical-description","exploit"]},{"url":"https://www.exploit-db.com/exploits/50163","tags":["exploit"]},{"url":"https://packetstormsecurity.com/files/163702","tags":["exploit"]},{"url":"https://cxsecurity.com/issue/WLB-2021070173","tags":["exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/206477","tags":["vdb-entry"]},{"url":"https://web.archive.org/web/20220527162453/http://www.ljkj2012.com/","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/longjing-technology-bems-api-remote-arbitrary-file-download","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-552","description":"CWE-552 Files or Directories Accessible to External Parties","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-05-14T02:06:50.957Z"},"credits":[{"lang":"en","type":"finder","value":"Gjoko Krstic of Zero Science Lab"}],"impacts":[{"capecId":"CAPEC-126","descriptions":[{"lang":"en","value":"CAPEC-126 Path Traversal"}]}],"source":{"discovery":"UNKNOWN"},"timeline":[{"lang":"en","time":"2021-07-27T16:00:00.000Z","value":"ZSL-2021-5657 is publicly disclosed."}],"x_generator":{"engine":"Vulnogram 0.5.0"},"datePublic":"2021-07-29T00:00:00.000Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-11-13T17:05:01.698452Z","id":"CVE-2021-4463","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-11-13T17:05:15.434Z"}}]}}}