PT-2021-4975 · 3D Viewer · 3D Viewer

Mat Powell · Published 2021-06-17 · Updated 2023-12-28 · CVE-2021-43208

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 3D Viewer versions (affected versions not specified)

Description The issue is related to errors in code generation management. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending a specially crafted request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2021-05731

CVE-2021-43208

ZDI-21-702

Affected Products

3D Viewer

References · 10

• https://zerodayinitiative.com/advisories/ZDI-21-702 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-43208 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43208 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43208 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43208 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05731 · Security Note
• https://t.me/true_secator/2302 · Telegram Post
• https://t.me/ckure/10010 · Telegram Post
• https://t.me/isacarusec/4647 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021110907 · Note