CVE-2021-44750— Arbitrary Code Execution
Quick assessment
Affected
F-Secure F-Secure Elements Agent, F-Secure MDR, F-Secure Client Security, F-Secure Server Security, F-Secure Email and Server Security, F-Secure Freedome VPN, F-Secure SAFE, F-Secure KEY, and F-Secure Internet Security / Anti-Virus
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
F-Secure Elements Agent等都是芬兰F-Secure公司的产品。F-Secure Elements Agent是一种云原生端点保护系统。F-Secure MDR是一种托管网络安全服务。F-Secure Client Security是一种客户端安全解决方案。 F-Secure 多款产品存在安全漏洞，该漏洞允许攻击者创建一个特殊的配置文件，从而可执行任何命令。以下产品和版本受到影响：F-Secure Elements Agent,F-Secure MDR,F-Secure Client
Possible ATT&CK Techniques 1 AI
T1500.005
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-44750
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary Code Execution
Source: CVE Program / CVE List V5
Vulnerability Description
An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
F-Secure 多款产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F-Secure Elements Agent等都是芬兰F-Secure公司的产品。F-Secure Elements Agent是一种云原生端点保护系统。F-Secure MDR是一种托管网络安全服务。F-Secure Client Security是一种客户端安全解决方案。 F-Secure 多款产品存在安全漏洞，该漏洞允许攻击者创建一个特殊的配置文件，从而可执行任何命令。以下产品和版本受到影响：F-Secure Elements Agent,F-Secure MDR,F-Secure Client
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| F-Secure | F-Secure Elements Agent, F-Secure MDR, F-Secure Client Security, F-Secure Server Security, F-Secure Email and Server Security, F-Secure Freedome VPN, F-Secure SAFE, F-Secure KEY, and F-Secure Internet Security / Anti-Virus | All Version | - |
|
II. Public POCs for CVE-2021-44750
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-44750
请登录查看更多情报信息。
Other References for CVE-2021-44750 (2)
IV. Related Vulnerabilities
Same vendor: F-Secure
V. Comments for CVE-2021-44750
No comments yet