CVE-2021-27722

Katalog CVE

CVSS 5.5 · Medium EPSS 0,72%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada nsasoft spotauditor. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.

Rincian

Terbit di NVD

2 November 2021

Terakhir diubah

29 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,72% peluang dieksploitasi; lebih tinggi dari 52,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/49590 not applicable · advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/49638 not applicable · advisory pihak ketiga · vdb entry