CVE-2021-32794 affects ArchiSteamFarm (ASF), a C# application for idling Steam cards, specifically a bug in the ASF API endpoint responsible for updating global ASF configurations. This vulnerability could inadvertently remove the IPCPassword security measure from the IPC interface if not explicitly specified during a configuration update, potentially allowing unauthorized access. With a CVSS score of 7.5 (HIGH), the vulnerability has a network attack vector, high attack complexity, and high potential impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, no known exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.1.2.4CPE matchmatch criteria | cpe:2.3:a:archisteamfarm_project:archisteamfarm:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.