CVEvulnerability
CVE-2021-36798
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-770
Description
A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 server thread and block beacons' communication with it.
Affected configurations
• helpsystems cobalt strike 4.2
• helpsystems cobalt strike 4.3
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/ Exploit, Third Party Advisory
- https://www.cobaltstrike.com/releasenotes.txt Release Notes, Vendor Advisory
- https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/ Exploit, Third Party Advisory
- https://www.cobaltstrike.com/releasenotes.txt Release Notes, Vendor Advisory