Vulnerabilities > CVE-2021-45891 - Incorrect Resource Transfer Between Spheres vulnerability in Zauner ARC 4.2.0.4

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
zauner
CWE-669

Summary

An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side, not server-side.

Vulnerable Configurations

Part Description Count
Application
Zauner
1