CVE-2021-38449

CVE-2021-38449 affects AUVESY Versiondog. The vulnerability stems from by-design writing or copying data into a buffer controlled by the client, enabling memory rewrite in the affected product. It is rated CVSS v3.1 base 9.8 (NETWORK, LOWATTACK, NONE privileges, HIGH confidentiality/integrity/ava...

CVE-2021-38449

Some API functions permit by-design writing or copying data into a given buffer. Since the client controls these parameters, an attacker could rewrite the memory in any location of the affected product...