Vulnerability · Published Oct 22, 2021 · Assigned by icscert
CVE-2021-38455AUVESY Versiondog
High 7.3
In plain English
A high-severity improper input validation in Versiondog from AUVESY. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.8%top 44.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner calls without checking the type of the parameter or the value.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AUVESY | Versiondog | All – through 8.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01 x_refsource_CONFIRM