Vulnerability · Published Sep 27, 2021 · Assigned by mitre

CVE-2021-37786

Medium 4.6

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS NVD)4.6Medium

Exploit odds (30 days)0.2%top 90.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Certificate Check App IOS 2.2.0 and below affected, patch in progress. A denial of service (physically proximate) could be caused by scanning a crafted QR code.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/admin-ch/CovidCertificate-App-iOS/issues/146 x_refsource_MISC