CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2021-42338
Severity
CRITICAL
CVSS
9.8
EPSS
5.63%
Original NVD Description
4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.
Related CVEs
Other vulnerabilities affecting the same vendor(s)