CVE-2021-27514 | BDVDB-2026-149456 Detail

Description#

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py
https://github.com/EyesOfNetworkCommunity/eonweb/issues/87

Exploit#

No public exploit known

History#

Version 12021-02-21Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.