Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-44794

Information Leakege via Unauthorized Access in Single Connect

Description

Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kron Single Connect

Default version status: unaffected

  • unspecified to < 2.16affected

References