Skip to content
OpenAdvisories
High ICSA-21-161-02 2 CVEs

AGG Software Web Server Plugin

Published Jun 10, 2021 · Updated Jun 10, 2021

Vendor: AGG Software Product: Web Server

Summary

Successful exploitation of these vulnerabilities could allow remote code execution and exposure of arbitrary system files.

Vulnerabilities 2

  • High 8.2
    CVE-2021-32962

    Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

    The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code.

    AGG Software Web Server (webserver.dll)
  • Medium 6.5
    CVE-2021-32964

    Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

    The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system.

    AGG Software Web Server (webserver.dll)

Revision history

  1. #1

    ICSA-21-161-02 AGG Software Web Server Plugin

References