PT-2021-21131 · Netop · Netop Vision Pro

Douglas Mckee · Published 2021-09-27 · Updated 2021-10-04 · CVE-2021-36134

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Netop Vision Pro versions up to and including 9.7.2

Description: The issue is related to an out of bounds write vulnerability in the JPEG parsing code, which could allow an adjacent unauthenticated attacker to write to arbitrary memory. This could potentially lead to a Denial of Service (DoS).

Recommendations: For versions up to and including 9.7.2, update to a version later than 9.7.2 to resolve the issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-36134

Affected Products

Netop Vision Pro

References · 3

• 🔥 https://mcafee.com/blogs/?p=127255&preview=true · Exploit
• https://osv.dev/vulnerability/CVE-2021-36134 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36134 · Security Note