onyx

onyx --cves cve-2021-22908

CVE-2021-22908

HIGHPulse Secure
score
<0.1
cvss
8.8
epss
69.4%
published
2021-05-27
kev added
—
first seen

Windows File Resource Profiles 9.X contains a buffer overflow caused by improper handling of SMB share browsing, letting remote authenticated users execute arbitrary code as root, exploit requires user authentication and privileges.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-05-27 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 69.4%2026-09-23: epss 69.4%2026-09-24: epss 69.4%2026-09-25: epss 69.4%2026-09-26: epss 69.4%2026-09-27: epss 69.4%2026-09-28: epss 69.4%2026-09-29: epss 69.4%2026-09-30: epss 69.4%2026-10-01: epss 69.4%2026-10-02: epss 69.4%2026-10-03: epss 69.4%2026-10-04: epss 69.4%2026-10-05: epss 69.4%2026-10-06: epss 69.4%2026-10-07: epss 69.4%2026-10-08: epss 69.4%2026-10-09: epss 69.4%2026-10-10: epss 69.4%2026-10-11: epss 69.4%2026-10-12: epss 69.4%2026-10-13: epss 69.4%2026-10-14: epss 69.4%2026-10-15: epss 69.4%2026-10-16: epss 69.4%2026-10-18: epss 69.4%2026-10-19: epss 69.4%2026-10-20: epss 69.4%2026-10-21: epss 69.4%69.4%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-120

References 2