by Kastro
Paper/Archive/CVE-2021-26621

CVE-2021-26621

NetU Corp. MEX01 — Netis Korea MEX01 Buffer overflow vulnerability

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 77.7.777 × 2015.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.

Affected

ProductAffectedFixed inSource
MEX01unspecified – v1.9.18–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
krcert (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refkrcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66579