by Kastro
Paper/Archive/CVE-2021-21783

CVE-2021-21783

talos — A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107.

EPSS 5%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 92.5.925 × 2018.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Affected

ProductAffectedFixed inSource
GeniviaGenivia gSOAP 2.8.109, Genivia gSOAP 2.8.110–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
talos (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftalosintelligence.com/vulnerability_reports/TALOS-2021-1245reforacle.com/security-alerts/cpuoct2021.htmlreforacle.com/security-alerts/cpujan2022.html