CVE-2021-33318

Katalog CVE

CVSS 9.8 · Critical EPSS 2,1%

Kerentanan Incorrect Type Conversion or Cast pada ipmatcher project ipmatcher, watsonwebserver project watsonwebserver. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below (IpMatcher) and 4.1.3 and below (WatsonWebserver) due to insufficient validation of input IP addresses and netmasks against the internal Matcher list of IP addresses and subnets.

Rincian

Terbit di NVD

16 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-704: Incorrect Type Conversion or Cast

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 80,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jchristn/IpMatcher/commit/81d77c2f33aa912dbd032b34b9e184fc6e041d89 patch · advisory pihak ketiga
• https://github.com/jchristn/IpMatcher advisory pihak ketiga
• https://github.com/jchristn/WatsonWebserver advisory pihak ketiga
• https://github.com/kaoudis/advisories/blob/main/0-2021.md exploit · advisory pihak ketiga