Vulnerability CVE-2021-33658
Published: 2022-03-11

Description:
atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration.

Type:

CWE-306

 (Missing Authentication for Critical Function)

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

 References:
https://www.openeuler.org/zh/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1541
Copyright 2026, cxsecurity.com

 

Back to Top