CVE-2021-20655

HIGHRansomware

soliton filezen Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2021-20655 has a selected CVSS score of 7.2 (high). VulnCheck reports CVE-2021-20655 use in known ransomware campaigns.

Description

FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 22, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck
Ransomware use
Observed · VulnCheck

Affected products and versions

2
ProductSourceVersion range

FileZen

Browse Soliton Systems K.K. / FileZen
CVE ListV3.0.0 to V4.2.7 and V5.0.0 to V5.0.2affected

filezen

Browse soliton / filezen
VulnCheckVersion data not supplied

References

3