본문내용 바로가기 메인메뉴 바로가기 푸터 바로가기

Security Advisory
CVE-2021-26621 | Netis Korea MEX01 Buffer overflow vulnerability2022.03.25
□ Overview
 o NetU Corp. (Netis Systems Co., Ltd Branch in Korea) released security update to address buffer overflow vulnerability in MEX01.
Vulnerability
Vulnerability Type Impact Severity CVSS Score CVE ID
Buffer Overflow Remote code execution High 8.1 CVE-2021-26621

□ Description
 o An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01.
 o Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.

□ Affected Product
Affected Product
Product Version Platform
MEX01 prior of v1.9.18 Windows, Mac OS and etc.

□ Solution
 o Update software over MEX01 Firmware v1.9.19 version or higher.

□ Reference
 [1] https://netu.co.kr/

□ Etc
 o Thanks to Dohyun Kim for reporting this vulnerability.


□ 작성 : 침해사고분석단 취약점분석팀