What is CVE-2021-33577?

CVE-2021-33577 is a medium-severity vulnerability in Cleo Lexicom. CVSS score: 5.3/10. Published 2021-06-18.

How severe is CVE-2021-33577?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Cleo Lexicom

CVE-2021-33577

An issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message to identify themselves (via encryption and signing of the message) can be bypassed by changing the Content-Type of the message to text/plain.

EPSS: 0.006 (44.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Cleo Lexicom — versions 5.5.0.0
N/a — versions n/a

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Product, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-33577?: CVE-2021-33577 is a medium-severity vulnerability in Cleo Lexicom. CVSS score: 5.3/10. Published 2021-06-18.
How severe is CVE-2021-33577?: Medium severity. CVSS v3 base score is 5.3 out of 10.