PT-2021-4884

CVE-2021-38684

Published

2021-11-12

Updated

2022-02-10

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Multimedia Console versions prior to 1.4.3 Multimedia Console versions prior to 1.5.3

Description A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. This can be achieved by sending a specially crafted request.

Recommendations For versions prior to 1.4.3, update to Multimedia Console 1.4.3 or later. For versions prior to 1.5.3, update to Multimedia Console 1.5.3 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')

CWE-121: Stack-based Buffer Overflow

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2021-38684