CVE Catalog

CVE-2021-45783

MediumCVSS 4.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
1.87%

77th percentile - higher than 77% of all known CVEs

Summary

A directory traversal vulnerability in Bookeen Notea Firmware BK_R_1.0.5_20210608 allows an attacker to obtain sensitive information by manipulating file paths.

Risk Assessment

An attacker can remotely read sensitive data such as configurations, passwords, or user data, leading to a breach of system confidentiality.

Recommendation

Immediately update the Bookeen Notea firmware to the latest version that fixes this vulnerability and restrict network access to the device.

Original NVD description (English source)

Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to obtain sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS