Zauner maintains a focused, niche product portfolio centered on the Arc application, where disclosed vulnerabilities reflect foundational information-security handling challenges including cleartext transmission of sensitive data, improper case-sensitivity logic, and inadequate credential protection. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Zauner over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-45891HIGH An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side, | Apr 5, 2022 | 8.8 | 28 | NO | NO |
CVE-2021-45893HIGH An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier. | Apr 5, 2022 | 7.5 | 25 | NO | NO |
CVE-2021-45892MEDIUM An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format. | Apr 5, 2022 | 5.9 | 21 | NO | NO |
CVE-2021-45894MEDIUM An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of Sensitive Information. | Apr 5, 2022 | 5.9 | 21 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Zauner.
Media articles that mention a CVE ID that affects a product developed by Zauner — matched by CVE ID, not by vendor name.