CVE-2021-47705

Katalog CVE

CVSS 8.7 · High EPSS 0,49%

Kerentanan Out-of-bounds Write. Skor CVSS 4.0 8.7 (High) menurut vulncheck.com.

Deskripsi (NVD)

COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit improper boundary validation in CNC_Ctrl.dll to cause heap corruption and potentially gain system-level access.

Rincian

Terbit di NVD

9 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 4.0

8.7 (High), sumber vulncheck.com
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.commax.com
• https://www.exploit-db.com/exploits/50232
• https://www.vulncheck.com/advisories/commax-ums-client-activex-control-cnc-ctrl-dll-heap-buffer-overflow
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5664.php