CVE-2021-38469criticalCWE-427

CVE-2021-38469: critical vulnerability in AUVESY Versiondog

AUVESY Versiondog

Published · Updated

Follow this CVE+ Monitor Versiondog

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 0.6%
Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
AUVESY · Versiondog
Related CVEs — AUVESY Versiondog

In the same product, most dangerous first.

CVE-2021-38457CRITICALAUVESY VersiondogEPSS 1.3%CVE-2021-38449CRITICALAUVESY VersiondogEPSS 1.3%CVE-2021-38477CRITICALAUVESY VersiondogEPSS 1.2%CVE-2021-38471CRITICALAUVESY VersiondogEPSS 1.1%CVE-2021-38453CRITICALAUVESY VersiondogEPSS 1.1%CVE-2021-38459HIGHAUVESY VersiondogEPSS 1.0%