CVE-2021-3003

CVE-2021-3003 describes a vulnerability in Agenzia delle Entrate Desktop Telematico 1.0.0, where the software communicates with its update server via unencrypted HTTP. This allows a man-in-the-middle attacker to intercept and spoof product updates, potentially delivering malicious software. Rated Medium severity (CVSS 5.3), exploitation requires user interaction and a high attack complexity, but could lead to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.