PT-2026-4511 · Nsauditor · Nsauditor

Ismael Nava · Publicado 2026-01-23 · Atualizado 2026-01-24 · CVE-2021-47895

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Nsauditor version 3.2.2.0

Description The software contains a denial of service issue that allows attackers to crash the application. This is achieved by overwriting the Event Description field with a large buffer. Specifically, a 10,000-character 'U' buffer, when pasted into the Event Description field, triggers the application crash. The vulnerable field is the Event Description field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2021-47895

Produtos afetados

Nsauditor

Referências · 7

• 🔥 https://exploit-db.com/exploits/49568 · Exploit
• https://osv.dev/vulnerability/CVE-2021-47895 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-47895 · Nota de Segurança
• https://twitter.com/CVEnew/status/2014995836128927805 · Publicação no Twitter
• https://vulncheck.com/advisories/nsauditor-event-description-denial-of-service · Nota
• https://t.me/CVEtracker/42859 · Publicação no Telegram
• https://nsauditor.com · Nota