NVD disclosure day
CVE-2021-4034
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the polkit pkexec utility allows local users to gain administrative privileges. This flaw can enable an unprivileged user to execute arbitrary code, potentially impacting system security and data integrity. Organizations should review their systems for this vulnerability.
CVE-2021-40407
Halo Surface Signal: 3 out of 5 — possibly public-facing.
An OS command injection vulnerability exists in the network settings of Reolink RLC-410W devices, allowing attackers to execute commands via HTTP requests. This could lead to unauthorized access and control of the affected device.
CVE-2021-44971
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Multiple Tenda devices are susceptible to an authentication bypass vulnerability that an attacker could exploit to gain sensitive information and potentially execute commands remotely. This issue is concerning because these network gateway devices are often at the network perimeter, increasing the risk of external expl