Buffer overflow in Netu Mex01
CVE-2021-26621
An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.
Vulnerability class: Buffer Overflow
EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Netu Mex01
- Netu Mex01_firmware
- Netu Corp. Mex01 — versions unspecified
Weakness classification (CWE)
References
- vuln@krcert.or.kr (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-26621?
- CVE-2021-26621 is a high-severity vulnerability in Netu Mex01, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.1/10. Published 2022-03-25.
- How severe is CVE-2021-26621?
- High severity. CVSS v3 base score is 8.1 out of 10.