high7.8
CVE-2021-45912
An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessAc…
Impact
An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Controlup | Real-Time Agent | before 8.5 |