PT-2022-12466 · Unknown · Shockwall System

宋侑霖 · Published 2022-01-03 · Updated 2022-01-11 · CVE-2021-45916

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Shockwall system (affected versions not specified)

Description The issue is related to improper input validation in the programming function of the system. An authenticated attacker within the local area network can exploit this by sending a malicious response to the server, which can disrupt the service partially.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-45916

Affected Products

Shockwall System

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-45916 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45916 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-5432-b9074-1.html · Note