CVE-2021-22304

Name of the Vulnerable Software and Affected Versions: Taurus-AL00A version 10.0.0.1(C00E1R1P1)

Description: The issue is related to a use after free vulnerability. A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending a specific message to the affected module, potentially leading to a module crash and compromising normal service.

Recommendations: For Taurus-AL00A version 10.0.0.1(C00E1R1P1), as a temporary workaround, consider restricting the handling of messages by the affected module until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.