CVE-2021-27235: Mutare Voice

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database.

Affected products

• Mutare Voice: from 3.2.6, before 3.3.8 (fixed in 3.3.8)

Published 2021-02-16. Last modified 2026-06-17.