Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2021-47827

WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service

Description

WebSSH for iOS 14.16.10 contains a denial of service vulnerability in the mashREPL tool that allows attackers to crash the application by pasting malformed input. Attackers can trigger the vulnerability by copying a 300-character buffer of repeated 'A' characters into the mashREPL input field, causing the application to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WebSSH WebSSH for iOS

  • 14.16.10affected

References