PT-2021-22127 · Auvesy · Versiondog

Amir Preminger · Published 2021-10-22 · Updated 2021-10-27 · CVE-2021-38449

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned

Description The issue allows an attacker to rewrite memory in any location of the affected product by exploiting API functions that permit writing or copying data into a given buffer, as the client controls these parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-123

Related Identifiers

CVE-2021-38449

Affected Products

Versiondog

References · 3

• https://osv.dev/vulnerability/CVE-2021-38449 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38449 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01 · Note