CVE-2021-3341

Published: Jan 29, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request.

Affected (2)

Products: Dh2i: Dxenterprise, Dxodyssey

Dh2i

2 products

Dxenterprise

Dxodyssey

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dh2i Dxenterprise	From 19.5 to 20.0.218
Dh2i Dxodyssey	From 19.5 to 20.0.219

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (2)

https://clients.dh2i.com/Support/Article.aspx?ID=2963454

Source: cve@mitre.org

MitigationVendor Advisory

https://clients.dh2i.com/Support/Article.aspx?ID=2963454

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.