Vulnerability in Reprisesoftware Reprise_license_manager

CVE-2021-44153

An issue was discovered in Reprise RLM 14.2. When editing the license file, it is possible for an admin user to enable an option to run arbitrary executables, as demonstrated by an ISV demo "C:\Windows\System32\calc.exe" entry. An attacker…

EPSS: 0.020 (78.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

References

  • cve@mitre.org (Product, Patch, x_refsource_MISC, Vendor Advisory)
  • cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-44153?
CVE-2021-44153 is a high-severity vulnerability in Reprisesoftware Reprise_license_manager. CVSS score: 7.2/10. Published 2021-12-13.
How severe is CVE-2021-44153?
High severity. CVSS v3 base score is 7.2 out of 10.