What is CVE-2021-20656?

CVE-2021-20656 is a medium-severity vulnerability in Contec Sv-cpt-mc310, classified under Information Disclosure. CVSS score: 4.3/10. Published 2021-02-24.

How severe is CVE-2021-20656?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Information disclosure in Contec Sv-cpt-mc310

CVE-2021-20656

Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system, such as directories and/or file configurations via unspecifi…

Vulnerability class: Information Disclosure

EPSS: 0.011 (62.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Contec Sv-cpt-mc310
Contec Sv-cpt-mc310_firmware
Contec Co., Ltd. Solarview Compact — versions SV-CPT-MC310 prior to Ver.6.5

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-20656?: CVE-2021-20656 is a medium-severity vulnerability in Contec Sv-cpt-mc310, classified under Information Disclosure. CVSS score: 4.3/10. Published 2021-02-24.
How severe is CVE-2021-20656?: Medium severity. CVSS v3 base score is 4.3 out of 10.