critical9.8
CVE-2021-21783
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107.
Impact
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Genivia | Gsoap | Version 2.8.107 |
| Oracle | Communications Diameter Signaling Router | from 8.0.0 through 8.5.0 |
| Oracle | Communications Eagle Application Processor | from 16.1.0 through 16.4.0 |
| Oracle | Communications Eagle Lnp Application Processor | Versions 46.7, 46.8, 46.9 |
| Oracle | Communications Lsms | Versions 13.1, 13.2, 13.3, 13.4 |
| Oracle | Tekelec Virtual Operating Environment | from 3.4.0 through 3.7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1245
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1245
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html