CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation.

• CWE-276

• https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4Vendor Advisory
• https://labs.bishopfox.com/advisoriesThird Party Advisory
• https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4Exploit, Third Party Advisory
• https://www.ewon.biz/about-us/securityVendor Advisory
• https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcherVendor Advisory
• https://cdn.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2021-07-09-001---ewon-ecatcher.pdf?sfvrsn=b37418d7_4Vendor Advisory
• https://labs.bishopfox.com/advisoriesThird Party Advisory
• https://labs.bishopfox.com/advisories/ecatcher-desktop-version-6.6.4Exploit, Third Party Advisory
• https://www.ewon.biz/about-us/securityVendor Advisory
• https://www.ewon.biz/technical-support/pages/talk2m/talk2m-tools/talk2m-ecatcherVendor Advisory

Published

Jul 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33209An issue was discovered in Fimer Aurora Vision before 2.97.1…5.3
• CVE-2021-3321Integer Underflow in Zephyr in IEEE 802154 Fragment Reassemb…8.8
• CVE-2021-33210An issue was discovered in Fimer Aurora Vision before 2.97.1…4.3
• CVE-2021-33211A Directory Traversal vulnerability in the Unzip feature in …6.5
• CVE-2021-33212A Cross-site scripting (XSS) vulnerability in the "View in B…5.4
• CVE-2021-33213An SSRF vulnerability in the "Upload from URL" feature in El…6.5
• CVE-2021-33215An issue was discovered in CommScope Ruckus IoT Controller 1…4.3
• CVE-2021-33216An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-33217An issue was discovered in CommScope Ruckus IoT Controller 1…8.8
• CVE-2021-33218An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-33219An issue was discovered in CommScope Ruckus IoT Controller 1…9.8
• CVE-2021-3322Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassemb…6.5