PT-2022-11877

CVE-2021-43636

·

Published

2022-03-25

·

Updated

2022-03-31

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions T10 V2 Firmware version 4.1.8cu.5207 B20210320
Description A buffer overflow issue exists in the http request parse function when processing host data in the HTTP request process.
Recommendations For version 4.1.8cu.5207 B20210320, consider disabling the http request parse function until a patch is available. Restrict access to the HTTP request process to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')
Related identifiers
CVE-2021-43636
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com