CVE-2021-3341

7.5 highEPSS 1.3%

High (7.5) in dh2i. EPSS 1.3% chance of exploitation in the next 30 days.

A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-01-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dh2i:dxenterprise
dh2i:dxodyssey

References

https://clients.dh2i.com/Support/Article.aspx?ID=2963454
https://clients.dh2i.com/Support/Article.aspx?ID=2963454

Check your stack JSON