The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork.
References
Link | Resource |
---|---|
https://www.twcert.org.tw/tw/cp-132-5047-7ef35-1.html | Third Party Advisory |
https://www.twcert.org.tw/tw/cp-132-5047-7ef35-1.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 06:16
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.twcert.org.tw/tw/cp-132-5047-7ef35-1.html - Third Party Advisory |
10 Sep 2021, 15:31
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 8.3
v3 : 8.8 |
References | (MISC) https://www.twcert.org.tw/tw/cp-132-5047-7ef35-1.html - Third Party Advisory | |
CPE | cpe:2.3:o:benq:eh600_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:benq:eh600:-:*:*:*:*:*:*:* |
30 Aug 2021, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-08-30 15:15
Updated : 2024-11-21 06:16
NVD link : CVE-2021-37911
Mitre link : CVE-2021-37911
CVE.ORG link : CVE-2021-37911
JSON object : View
Products Affected
benq
- eh600_firmware
- eh600
CWE
CWE-269
Improper Privilege Management