CVE-2021-27198

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation runs as SYSTEM, which means that exploitation gives one Administrator privileges on the target system.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/161571/VisualWare-MyConnection-Server-11.x-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2021/Feb/81Mailing List, Third Party Advisory
https://myconnectionserver.visualware.com/download.htmlProduct, Vendor Advisory
https://myconnectionserver.visualware.com/support/newrelease.htmlRelease Notes, Vendor Advisory
https://www.securifera.com/advisories/cve-2021-27198/Third Party Advisory
http://packetstormsecurity.com/files/161571/VisualWare-MyConnection-Server-11.x-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2021/Feb/81Mailing List, Third Party Advisory
https://myconnectionserver.visualware.com/download.htmlProduct, Vendor Advisory
https://myconnectionserver.visualware.com/support/newrelease.htmlRelease Notes, Vendor Advisory
https://www.securifera.com/advisories/cve-2021-27198/Third Party Advisory

Timeline

Published: Feb 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-272009.8In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is CVE-2021-272018.8Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a b CVE-2021-272035.5In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHOD_NEITHER results in arbitrary memory dereferen CVE-2021-272045.5Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure.CVE-2021-272055.5Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leading to sensitive infor CVE-2021-272086.8When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any para CVE-2021-272097.1In the management interface on TP-Link Archer C5v 1.7_181221 devices, credentials are sent in a base64 format over cleartext HTTP.CVE-2021-272106.5TP-Link Archer C5v 1.7_181221 devices allows remote attackers to retrieve cleartext credentials via [USER_CFG#0,0,0,0,0,0#0,0,0,0,0,0]0,0 to CVE-2021-272117.5steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data.CVE-2021-272127.5In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi CVE-2021-272139.8config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.CVE-2021-272146.1A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows