CVE-2021-3341: A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, ve

This month

HIGH 7.5REMOTEUPGRADEUPGRADE

CVE-2021-3341 is a high-severity flaw (CVSS 7.5) affecting dxenterprise, dxodyssey. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request.

Why this priority

High severity
Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score	7.5 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	1.3% (top 30%)
CISA exploited list	No
Weakness	CWE-22
Published	2021-01-29
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: dh2i

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2021-01-29 01:15 UTCPublished CVE record published
2026-06-17 04:04 UTCUpdated Record last modified

dh2i dxenterprise UPGRADE

Affected: >= 19.5 and <= 20.0.218

Fixed in: newer than 20.0.218

Safe to downgrade to: a release before 19.5

1. Check installed version

apt-cache policy dxenterprise || rpm -q dxenterprise || dxenterprise --version

2. UPGRADE to newer than 20.0.218 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade dxenterprise

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade dxenterprise

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 19.5 (Debian / Ubuntu)

apt-cache madison dxenterprise sudo apt install dxenterprise=<VERSION_BEFORE_19.5> sudo apt-mark hold dxenterprise

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list dxenterprise sudo dnf downgrade dxenterprise-<VERSION_BEFORE_19.5> sudo dnf versionlock add dxenterprise

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

dh2i dxodyssey UPGRADE

Affected: >= 19.5 and <= 20.0.219

Fixed in: newer than 20.0.219

Safe to downgrade to: a release before 19.5

1. Check installed version

apt-cache policy dxodyssey || rpm -q dxodyssey || dxodyssey --version

2. UPGRADE to newer than 20.0.219 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade dxodyssey

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade dxodyssey

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 19.5 (Debian / Ubuntu)

apt-cache madison dxodyssey sudo apt install dxodyssey=<VERSION_BEFORE_19.5> sudo apt-mark hold dxodyssey

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list dxodyssey sudo dnf downgrade dxodyssey-<VERSION_BEFORE_19.5> sudo dnf versionlock add dxodyssey

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2021-3341?

dxenterprise: upgrade to newer than 20.0.218; dxodyssey: upgrade to newer than 20.0.219. Exact commands for each OS are on this page.

Is CVE-2021-3341 being exploited?

CVE-2021-3341 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2021-3341 affect?

CVE-2021-3341 affects dxenterprise, dxodyssey. Severity is high (CVSS 7.5). A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request.

How urgent is CVE-2021-3341?

Priority 49/100. High severity; Remotely exploitable, no login, no user action

Software pages

Windows vulnerabilities

References

← Back to latest CVEs