CVE-2021-38451
Summary
| CVE | CVE-2021-38451 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-10-22 12:15:00 UTC |
| Updated | 2021-10-27 15:06:00 UTC |
| Description | The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data. |
Risk And Classification
Problem Types: CWE-125
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Auvesy | Versiondog | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| AUVESY Versiondog | CISA | CONFIRM | us-cert.cisa.gov | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Amir Preminger of Claroty reported these vulnerabilities to CISA.
Legacy QID Mappings
- 590588 AUVESY Versiondog Multiple Vulnerabilities (ICSA-21-292-01)