CVE-2021-3537

2021-05-1400:00:00

attackerkb.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

61.2%

JSON

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

Recent assessments:

2020Cyberworld at May 19, 2021 12:50am UTC reported:

Seems to use Arpa or loopback addresses to change the behavior of the os and the applications.
Certificate changes
Random files and exes added to the applications list.
Firewall rules change regardless of privilege’s
Like the attacker lives inside the computers applications

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0