PT-2022-11615 · Pexip · Pexip Infinity

Published 2022-01-15 · Updated 2022-01-24 · CVE-2021-42555

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 26.2

Description The issue is related to missing call-setup input validation, which allows for temporary remote Denial of Service (abort).

Recommendations For versions prior to 26.2, update to version 26.2 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-42555

Affected Products

Pexip Infinity

References · 3

• https://docs.pexip.com/admin/security_bulletins.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42555 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42555 · Vendor Advisory