CVE-2021-46384
CVSS v3
9.8
CRITICAL
EPSS Score
12.3 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker.template.utility.Execute"?new()("calc")}. ¶¶ MCMS has a pre-auth RCE vulnerability through which allows unauthenticated attacker with network access via http to compromise MCMS. Successful attacks of this vulnerability can result in takeover of MCMS.
Technical details
- Published
- 2022-03-04
Frequently asked questions
What is CVE-2021-46384?
https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker.template.utility.Execute"?new()("calc")}. ¶¶ MCMS has a pre-auth RCE vulnerability through which allows unauthenticated attacker with network access via http to compromise MCMS. Successful attacks of this vulnerability can result in takeover of MCMS.
Is CVE-2021-46384 actively exploited?
Active exploitation of CVE-2021-46384 has not been confirmed. The EPSS score is 12.3%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2021-46384?
CVE-2021-46384 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2021-46384 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2021 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).