PatchTheCVExarrow vulnerabilities and fixes
Recent CVEs affecting xarrow, with upgrade or downgrade steps. 3 tracked.
xarrow has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-05-16. Highest priority: CVE-2021-33021 (score 36/100).
- CVE-2021-33025 MEDIUM 5.6 UPGRADE xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privile
- CVE-2021-33021 MEDIUM 6.1 UPGRADE xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the reso
- CVE-2021-33001 MEDIUM 6.1 UPGRADE xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the reso
FAQ
How do I fix xarrow vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xarrow being exploited right now?
None of the tracked xarrow CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xarrow CVE should I patch first?
CVE-2021-33021 currently ranks highest (36/100): xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the reso.