CVE-2021-31926
MEDIUMCubeCoders AMP 2.1.0-2.1.1.1 - Authenticated Firewall Port Opening via API Endpoint
Title source: llmDescription
AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/CubeCoders/AMP/issues/443
Scores
CVSS v3
6.5
EPSS
0.0089
EPSS Percentile
54.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-863
Status
published
Products (1)
cubecoders/amp
2.1.0 - 2.1.1.2
Published
Apr 30, 2021
Tracked Since
Feb 18, 2026