EIP-2015-0017

An arbitrary file upload vulnerability has been found in NEC EXPRESSCLUSTER X. WebManager (clpwebmc.exe) is a webserver tasked with providing remote administrative access, it is configured to utilize port 29003 by default. This vulnerability occurs due to lack of input validation when supplying “UploadFile.js”. An attacker is able to transmit binary data resulting in eventual remote code execution in the context of SYSTEM.

Vulnerability Identifiers

• Exodus Intelligence: EIP-2015-0017
• MITRE CVE: CVE-2021-20705

Vulnerability Metrics

• CVSSv2 Score: 10.0

Vendor References

• https://jpn.nec.com/security-info/secinfo/nv21-015.html

Discovery Credit

• Exodus Intelligence

Disclosure Timeline

• Disclosed to affected vendor: February 25th, 2021
• Disclosed to public: October 29th, 2021

Further Information

Readers of this advisory who are interested in receiving further details around the vulnerability, mitigations, detection guidance, and more can contact us at [email protected].

Researchers who are interested in monetizing their 0Day and NDay can work with us through our Research Sponsorship Program.