CVE-2021-40147: 
Homebrew vulnerability analysis and mitigation

EmTec ZOC before version 8.02.2 contains a security vulnerability that allows \e[201~ pastes. This is distinct from CVE-2021-32198. The vulnerability was discovered and disclosed on August 26, 2021 (NVD, MITRE).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (CRITICAL) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The vulnerability relates to the ability to paste specific escape sequences (\e[201~) which could potentially be exploited (NVD).

Based on the CVSS score and vector string, this vulnerability could allow an unauthenticated attacker to achieve high levels of confidentiality, integrity, and availability impact on the affected system with no user interaction required (NVD).

The vulnerability requires network access but is considered low complexity to exploit with no privileges or user interaction required, as indicated by the CVSS vector string AV:N/AC:L/PR:N/UI:N (NVD).

The vulnerability has been patched in EmTec ZOC version 8.02.2. Users should upgrade to this version or later to mitigate the vulnerability (Release Notes).