HIGH🇵🇱 Wersja polska

CVE-2021-26726

CVSS 8.8v3.1pub. 2022-02-16upd. 2024-11-21

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Valmet Dna

    APP
    Valmet
    2012 – 2021
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCECommand Injection
CWE
References

Related vulnerabilities

CVE-2025-15577HIGH8.7ten sam produkt

An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read ...