Unintended File System Access Vulnerability in Facility Explorer SNC Series Supervisory Controller (F4-SNC)

CVE-2021-27661 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Controller (F4-SNC) user an unintended level of access to the controller’s file system, allowing them to access or modify system files by sending specifically crafted web messages to the F4-SNC.

Learn more about our Web App Pen Testing.