VulnerabilityDeferred

CVE-2021-27700

SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions.

HIGH 7.6EPSS 0.34%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized customer with partner mode can switch to another customer dashboard and perform actions like modify user, delete user, etc.

CVSS 3.1: 7.6 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
EPSS: 0.34% probability · 27th percentile
CISA KEV: Not listed
Weakness: CWE-639
Source: cve@mitre.org

References

https://github.com/Mrnmap/mrnmap-cve/blob/main/CVE-2021-27700

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.