What is CVE-2021-37911?

CVE-2021-37911 is a high-severity vulnerability in Benq Eh600, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2021-08-30.

How severe is CVE-2021-37911?

High severity. CVSS v3 base score is 8.8 out of 10.

Privilege escalation in Benq Eh600

CVE-2021-37911

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork.

Vulnerability class: Privilege Escalation

EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Benq Eh600
Benq Eh600_firmware
Benq Eh600 Ota — versions unspecified

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

twcert@cert.org.tw (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-37911?: CVE-2021-37911 is a high-severity vulnerability in Benq Eh600, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2021-08-30.
How severe is CVE-2021-37911?: High severity. CVSS v3 base score is 8.8 out of 10.