What is CVE-2021-37786?

CVE-2021-37786 is a medium-severity vulnerability in Bag Covid Certificate, classified under Improper Handling of Exceptional Conditions. CVSS score: 4.6/10. Published 2021-09-27.

How severe is CVE-2021-37786?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Vulnerability in Bag Covid Certificate

CVE-2021-37786

Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Certificate Check App IOS 2.2.0 and below affected, patch in progress. A denial of service (physically proximate) could be caused by scanning a crafted QR code.

EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Bag Covid_certificate
N/a — versions n/a

Weakness classification (CWE)

CWE-755 — Improper Handling of Exceptional Conditions

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2021-37786?: CVE-2021-37786 is a medium-severity vulnerability in Bag Covid Certificate, classified under Improper Handling of Exceptional Conditions. CVSS score: 4.6/10. Published 2021-09-27.
How severe is CVE-2021-37786?: Medium severity. CVSS v3 base score is 4.6 out of 10.