VULNERABILITY INTELLIGENCE
CVE-2021-47827
CVSS score4.6 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2026-01-16
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Description
WebSSH for iOS 14.16.10 contains a denial of service vulnerability in the mashREPL tool that allows attackers to crash the application by pasting malformed input. Attackers can trigger the vulnerability by copying a 300-character buffer of repeated 'A' characters into the mashREPL input field, causing the application to crash.
Weakness classification
- CWE-1284: Improper Validation of Specified Quantity in Input