CVEvulnerability
CVE-2021-33318
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-05-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-704
Description
An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below (IpMatcher) and 4.1.3 and below (WatsonWebserver) due to insufficient validation of input IP addresses and netmasks against the internal Matcher list of IP addresses and subnets.
Affected configurations
• ipmatcher project ipmatcher (<= 1.0.4.1)
• watsonwebserver project watsonwebserver (<= 4.1.3)
Related
Weakness · CWE (1)
- CWE-704 Incorrect Type Conversion or Cast weakness
References
- https://github.com/jchristn/IpMatcher Third Party Advisory
- https://github.com/jchristn/IpMatcher/commit/81d77c2f33aa912dbd032b34b9e184fc6e041d89 Patch, Third Party Advisory
- https://github.com/jchristn/WatsonWebserver Third Party Advisory
- https://github.com/kaoudis/advisories/blob/main/0-2021.md Exploit, Third Party Advisory
- https://github.com/jchristn/IpMatcher Third Party Advisory
- https://github.com/jchristn/IpMatcher/commit/81d77c2f33aa912dbd032b34b9e184fc6e041d89 Patch, Third Party Advisory
- https://github.com/jchristn/WatsonWebserver Third Party Advisory
- https://github.com/kaoudis/advisories/blob/main/0-2021.md Exploit, Third Party Advisory