Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2021-45917

SUN & MOON RISE CO., LTD. Shockwall - Improper Authentication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUN & MOON RISE CO., LTD. Shockwall

  • unspecified to < 7.20.0401affected

References