VULNERABILITY INTELLIGENCE

CVE-2021-38455

CVSS score7.3 HIGH
EPSS probability0.77%
CISA KEVNot currently listed
Published2021-10-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

Description

The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner calls without checking the type of the parameter or the value.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-20

Primary references