CVE-2021-30110

Name of the Vulnerable Software and Affected Versions Domain Time II versions prior to 5.2.b.20210331

Description The issue allows remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed response to the UDP query used to check for updates. This is achieved by sending a malicious update URL in response to the UDP query.

Recommendations For versions prior to 5.2.b.20210331, update to version 5.2.b.20210331 or later to resolve the issue. As a temporary workaround, consider restricting the use of the UDP query for update checks until a patch is applied.