VULNERABILITY INTELLIGENCE
CVE-2021-45916
CVSS score3.5 LOW
EPSS probability0.31%
CISA KEVNot currently listed
Published2022-01-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially.
Weakness classification
- twcert@cert.org.tw: CWE-20
- nvd@nist.gov: CWE-20
Primary references
- twcert@cert.org.tw — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory