PT-2021-4884 · Unknown · Multimedia Console

Crixer · Published 2021-11-12 · Updated 2022-02-10 · CVE-2021-38684

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Multimedia Console versions prior to 1.4.3 Multimedia Console versions prior to 1.5.3

Description A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. This can be achieved by sending a specially crafted request.

Recommendations For versions prior to 1.4.3, update to Multimedia Console 1.4.3 or later. For versions prior to 1.5.3, update to Multimedia Console 1.5.3 or later.

Fix

Buffer Overflow

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-121

CWE-787

Related Identifiers

BDU:2021-05619

CVE-2021-38684

Affected Products

Multimedia Console

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-38684 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38684 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05619 · Security Note
• https://qnap.com/en/security-advisory/qsa-21-45 · Vendor Advisory
• https://t.me/cvenotify/26580 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021111213 · Note