CVE-2021-26606
DreamSecurity MagicLine Buffer Overflow Vulnerability
- State
- Published
- Severity
- 9.8 Critical
- Published
- Aug 6, 2021
- Updated
- Sep 16, 2024
- Reserved
- Feb 3, 2021
Description
A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficient validation of the authorization certificate. An attacker could exploit this vulnerability by sending a crafted HTTP request an affected program. A successful exploit could allow the attacker to remotely execute arbitrary code on a target system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | krcert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
MagicLine4NX.exeDream Security Co.,Ltd |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.