PT-2022-11877 · Unknown · T10 V2 Firmware

Published 2022-03-25 · Updated 2022-03-31 · CVE-2021-43636

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions T10 V2 Firmware version 4.1.8cu.5207 B20210320

Description A buffer overflow issue exists in the http request parse function when processing host data in the HTTP request process.

Recommendations For version 4.1.8cu.5207 B20210320, consider disabling the http request parse function until a patch is available. Restrict access to the HTTP request process to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-43636

Affected Products

T10 V2 Firmware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-43636 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43636 · Vendor Advisory
• https://note.youdao.com/s/918vCBNT · Note