Vulnerability · Published Jan 3, 2022 · Assigned by twcert
CVE-2021-45916SUN & MOON RISE CO., LTD. Shockwall - Improper Input Validation
Low 3.5
In plain English
A low-severity improper input validation in Shockwall from SUN & MOON RISE CO., LTD.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.3%top 75.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SUN & MOON RISE CO., LTD. | Shockwall | unspecified – before 7.20.0401 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
References
- https://www.twcert.org.tw/tw/cp-132-5432-b9074-1.html x_refsource_MISC