« Volver al listado

CVE-2021-25271

Estado: ModificadaMedia (6)—

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sophos — Hitmanpro

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-25271",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@sophos.com",
      "affectedData": [
        {
          "vendor": "Sophos",
          "product": "HitmanPro",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "318",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-10-08T00:15:07.543",
  "references": [
    {
      "url": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20211007-hmp-lpe",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@sophos.com"
    },
    {
      "url": "https://www.sophos.com/en-us/security-advisories/sophos-sa-20211007-hmp-lpe",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318."
    },
    {
      "lang": "es",
      "value": "Un atacante local podría leer o escribir archivos arbitrarios con privilegios de administrador en HitmanPro versiones anteriores a Build 318"
    }
  ],
  "lastModified": "2026-06-17T03:41:44.817",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sophos:hitmanpro:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8DDBF17-78AB-41A5-B841-98CF0D541527",
              "versionEndExcluding": "318"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@sophos.com"
}