Security Advisory
CVE-2021-40376
7.8
HIGH
Vulnerability Description
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000.
Published Date
March 10, 2022
Official Source
NIST NVD Advisory