CVEvulnerability
CVE-2021-27722
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2021-11-02
- Last modified
- 2026-06-29
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-120
Description
An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.
Affected configurations
• nsasoft spotauditor 5.3.5
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://www.exploit-db.com/exploits/49590 Not Applicable, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/49638 Not Applicable, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/49590 Not Applicable, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/49638 Not Applicable, Third Party Advisory, VDB Entry