1. Home
  2. CVE Database
  3. CVE-2021-38451
MEDIUM · 4.8

CVE-2021-38451

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value ...

Vulnerability Description

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
AuvesyVersiondog< 8.0.0

Related Weaknesses (CWE)

CWE-125

References

FAQ

What is CVE-2021-38451?

CVE-2021-38451 is a vulnerability with a CVSS score of 4.8 (MEDIUM). The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value ...

How severe is CVE-2021-38451?

CVE-2021-38451 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-38451?

Check the references section above for vendor advisories and patch information. Affected products include: Auvesy Versiondog.