CVE-2021-3426: python before 2.7.18 (exclusive), from 3.6.0 (inclusive), before 3.6.13 (exclusive), from 3.7.0 (inclusive), before…

Affected technology

python · before 2.7.18 (exclusive)
python

python · from 3.6.0 (inclusive), before 3.6.13 (exclusive)
python

python · from 3.7.0 (inclusive), before 3.7.10 (exclusive)
python

python · from 3.8.0 (inclusive), before 3.8.8 (exclusive)
python

python · from 3.9.0 (inclusive), before 3.9.3 (exclusive)
python

python · 3.10.0 · update alpha1
python

python · 3.10.0 · update alpha2
python

python · 3.10.0 · update alpha3
python

python · 3.10.0 · update alpha4
python

python · 3.10.0 · update alpha5
python

python · 3.10.0 · update alpha6
python

fedora · 32
fedoraproject

fedora · 33
fedoraproject

fedora · 34
fedoraproject

debian linux · 9.0
debian

software collections · Version not applicable in the source CPE
redhat

enterprise linux · 8.0
redhat

cloud backup · Version not applicable in the source CPE
netapp

ontap select deploy administration utility · Version not applicable in the source CPE
netapp

snapcenter · Version not applicable in the source CPE
netapp

communications cloud native core binding support function · 1.10.0
oracle

zfs storage appliance kit · 8.8
oracle

python · python 3.8.9, python 3.9.3, python 3.10.0a7
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Adjacent network · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could access information they should not be able to access. NVD’s CVSS 3.1 assessment (base score 5.7/10) rates confidentiality impact as high; integrity and availability impact as none. Source advisory’s CVSS 3.1 assessment (base score 5.7/10) rates confidentiality impact as high; integrity and availability impact as none.