Approved changes feed: RSS · Atom

cpe:2.3:a:otris:update_manager:1.2.1.0:*:*:*:*:*:*:*

part: a version: 1.2.1.0 update: *

VendorOtris (aa1fde21-ef44-5b57-9c60-778b8ca63ff3)
ProductUpdate Manager (dc26d931-1f65-502a-82a6-e7e2d4888610)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40376 vulnerable 2026-06-08 05:35:17.871018 Details available
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000.
Published: 2022-03-07T03:41:46.000Z
Updated: 2024-08-04T02:44:09.654Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.