CVE-2021-33209

An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier.

• CWE-307

• https://fimeronline.sharepoint.com/:b:/s/GLB-publicsp/EeKCnV76jG5Pn9Ud30fTlesBlk-SZS3uFU80Gt8IEWiE4Q?e=TdmabsVendor Advisory
• https://twitter.com/FIMERspaThird Party Advisory
• https://fimeronline.sharepoint.com/:b:/s/GLB-publicsp/EeKCnV76jG5Pn9Ud30fTlesBlk-SZS3uFU80Gt8IEWiE4Q?e=TdmabsVendor Advisory
• https://twitter.com/FIMERspaThird Party Advisory

Published

Nov 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33200kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enf…7.8
• CVE-2021-33203Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.…4.9
• CVE-2021-33204In the pg_partman (aka PG Partition Manager) extension befor…9.8
• CVE-2021-33205Western Digital EdgeRover before 0.25 has an escalation of p…8.8
• CVE-2021-33207The HTTP client in MashZone NextGen through 10.7 GA deserial…9.8
• CVE-2021-33208The "Register an Ehcache Configuration File" admin feature i…7.2
• CVE-2021-3321Integer Underflow in Zephyr in IEEE 802154 Fragment Reassemb…8.8
• CVE-2021-33210An issue was discovered in Fimer Aurora Vision before 2.97.1…4.3
• CVE-2021-33211A Directory Traversal vulnerability in the Unzip feature in …6.5
• CVE-2021-33212A Cross-site scripting (XSS) vulnerability in the "View in B…5.4
• CVE-2021-33213An SSRF vulnerability in the "Upload from URL" feature in El…6.5
• CVE-2021-33214In HMS Ewon eCatcher through 6.6.4, weak filesystem permissi…6.1