CRITICAL🇵🇱 Wersja polska

CVE-2021-21783

CVSS 9.8v3.1pub. 2021-03-25upd. 2024-11-21

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Genivia Gsoap

    APP
    Genivia
    2.8.107

  • Oracle Communications Diameter Signaling Router

    APP
    Oracle
    8.0.0 – 8.5.0

  • Oracle Communications Eagle Application Processor

    APP
    Oracle
    16.1.0 – 16.4.0

  • Oracle Communications Eagle Lnp Application Processor

    APP
    Oracle
    46.746.846.9

  • Oracle Communications Lsms

    APP
    Oracle
    13.113.213.313.4

  • Oracle Tekelec Virtual Operating Environment

    APP
    Oracle
    3.4.0 – 3.7.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2020-2555CRITICAL9.8⚠ KEVPL ✓same product

RCE przez deserializację w Oracle Coherence via protokół T3

CVE-2017-9841CRITICAL9.8⚠ KEVPL ✓same product

RCE w PHPUnit — wykonanie kodu PHP przez eval-stdin.php

CVE-2020-13576CRITICAL9.8PL ✓same product

RCE w pluginie WS-Addressing biblioteki Genivia gSOAP

CVE-2020-11998CRITICAL9.8PL ✓same product

Apache ActiveMQ — RCE przez błędną konfigurację JMX RMIConnectorServer

CVE-2020-11973CRITICAL9.8PL ✓same product

Apache Camel Netty — niebezpieczna deserializacja Java (RCE)