AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-40846

HIGH · CVSS 7.5 EPSS 0.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-03-04 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.

CVE
CVE-2021-40846
Severity
HIGH
CVSS
7.5
EPSS
0.69%

Original NVD Description

An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check, and request, updates. Thus, attackers can man-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings.