CVE-2021-21783

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - talos-cna@cisco.com

Published

2021-03-25

Last modified

2024-08-03

Weaknesses

CWE-190, CWE-680

Affected products

• Gsoap (Genivia)
• Communications Diameter Signaling Router (Oracle)
• Communications Eagle Application Processor (Oracle)
• Communications Eagle Lnp Application Processor (Oracle)
• Communications Lsms (Oracle)
• Tekelec Virtual Operating Environment (Oracle)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1245
• https://www.oracle.com/security-alerts/cpujan2022.html
• https://www.oracle.com/security-alerts/cpuoct2021.html