Otris

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Otris records in CISA KEV

No Otris vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Update Manager · all components

TI-2021-17443 CVE-2021-40376 · GHSA-9x8w-8g8p-2qgx

LOW 34

otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.004 Published 2022-03-07 No fix listed CWE-287