CVE-2021-42952

CRITICAL

CVSS v3.1: 9.9 · EPSS: 0.0165 (73.7 percentile)

NetworkNo user interaction

Source data as of:

At a glance

Severity
CRITICAL
CVSS
9.9 v3.1 · NVD
EPSS
0.0165 (73.7 percentile) · FIRST.org
CISA KEV
No
Attack conditions (CVSS vector)
NetworkNo user interaction · Source: NVD Vector
Affected vendors
zepl
Published
2022-02-25 · Modified: 2026-07-05
References
Jump to references (2)

CVSS / EPSS / KEV

CVSS v3.1 9.9 / 10 CRITICAL Source: NVD
EPSS 0.0165 73.7 percentile Source: FIRST.org
CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability. Upon launching Remote Code Execution from the Notebook, users can then use that to subsequently escape the running context sandbox and proceed to access internal Zepl assets including cloud metadata services.

Record details

CVE ID
CVE-2021-42952
CVSS (v3.1)
9.9 (CRITICAL)
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability subscore
3.1
Impact subscore
6.0
EPSS
0.0165 (73.7 percentile) — 2026-07-05
CISA KEV
No
Affected vendors
zepl
Affected configurations (CPE)
1
Published
2022-02-25
Modified
2026-07-05
Status
Modified

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Related records

Other records sharing a factual facet, for cross-reference. A descriptive neighbourhood — ordering does not imply priority and is not a recommendation.

Same affected vendor

CVE-2021-42950 HIGH CVSS 8.8

Published the same year

CVE-2021-27132 CRITICAL CVSS 9.8 CVE-2021-27715 CRITICAL CVSS 9.8 CVE-2021-28235 CRITICAL CVSS 9.8 CVE-2021-3262 CRITICAL CVSS 9.8
← Back to all records