PT-2021-17073 · Dreamsecurity · Pki Security Solution

Yoonho Kim

·

Published

2021-08-06

·

Updated

2025-04-25

·

CVE-2021-26606

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Dream Security PKI Security Solution version le1.0.0.17
Description A vulnerability in the PKI Security Solution of Dream Security could allow arbitrary command execution due to insufficient validation of the authorization certificate. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected program, potentially allowing remote execution of arbitrary code on a target system.
Recommendations For version le1.0.0.17, consider applying the official fix to resolve the issue. As a temporary workaround, restrict access to the authorization certificate validation mechanism to minimize the risk of exploitation. Avoid using the vulnerable magicline4nx.exe until the issue is resolved.

Fix

Buffer Overflow

RCE

Weakness Enumeration

CWE-120CWE-20

Related Identifiers

CVE-2021-26606

Affected Products

Pki Security Solution