CVE-2021-35508: Terarecon Aquariusnet

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

NMSAccess32.exe in TeraRecon AQNetClient 4.4.13 allows attackers to execute a malicious binary with SYSTEM privileges via a low-privileged user account. To exploit this, a low-privileged user must change the service configuration or overwrite the binary service.

Affected products

• Terarecon Aquariusnet: version 4.4.13 only

Published 2021-09-01. Last modified 2026-06-17.