
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2021-1751 is a security vulnerability affecting macOS operating systems that was discovered and patched in early 2021. The vulnerability was identified in the NetFSFramework component and affects macOS Big Sur 11.0.1, macOS Catalina 10.15.7, and macOS Mojave 10.14.6. The issue was reported by Mikko Kenttälä (@Turmio_) of SensorFu (Apple Security).
The vulnerability is characterized as a logic issue in the NetFSFramework component of macOS. The security flaw stems from improper state management when handling Samba network shares. The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).
When exploited, this vulnerability could allow an attacker to execute arbitrary code on the target system through a maliciously crafted Samba network share. This could potentially lead to unauthorized access and compromise of the affected system (Apple Security).
Apple addressed this vulnerability by improving state management in the affected component. The fix was released as part of macOS Big Sur 11.2, Security Update 2021-001 Catalina, and Security Update 2021-001 Mojave. Users are advised to update their systems to these versions or later to protect against this vulnerability (Apple Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."