{"id":"CVE-2021-34995","published":"2022-01-13T21:44:48Z","modified":"2024-08-04T00:26:55Z","title":"This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell…","vendor":"Commvault","product":"CommCell","tier":"core","eol":null,"affectedVersions":[{"vendor":"Commvault","product":"CommCell","versions":["11.22.22"]}],"description":{"text":"This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DownloadCenterUploadHandler class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-13756.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an unrestricted file upload weakness in the DownloadCenterUploadHandler class of Commvault CommCell 11.22.22, caused by missing validation of user-supplied data. A remote attacker can exploit it over the network, with the authentication mechanism bypassed, to upload arbitrary files and execute code in the context of NETWORK SERVICE.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:15:30Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.68864,"percentile":0.99345,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-434","name":"Unrestricted Upload of File with Dangerous Type"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1330/","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-21642","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-21642","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-01-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-34995","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":26.0,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.87,"detail":"percentile 0.9935"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}