Tcl CVE-2021-35331

HIGH

Use of Externally-Controlled Format String (CWE-134)

2021-07-05 cve@mitre.org

7.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Jul 05, 2021 - 15:15 nvd

HIGH 7.8

DescriptionNVD

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding

AnalysisAI

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-134. In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding Affected products include: Tcl.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Tcl

View all

CVE-2023-43481 CRITICAL Act Now POC

An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote att

CVE-2022-27178 CRITICAL Act Now POC

A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.0

CVE-2022-26346 CRITICAL Act Now POC

A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14

CVE-2022-26342 CRITICAL Act Now POC

A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi M

CVE-2022-26009 CRITICAL Act Now POC

A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub

CVE-2022-25996 CRITICAL Act Now POC

A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi M

CVE-2022-24029 CRITICAL Act Now POC

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated c

CVE-2022-24028 CRITICAL Act Now POC

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated c

CVE-2022-24027 CRITICAL Act Now POC

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated c

CVE-2022-24026 CRITICAL Act Now POC

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated c

CVE-2022-24025 CRITICAL Act Now POC

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated c

CVE-2022-24024 CRITICAL Act Now POC

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. Rated c

Same weakness CWE-134 – Use of Externally-Controlled Format String

View all

CVE-2012-3569 CRITICAL POC

CVE-2012-2288 CRITICAL POC

CVE-2019-1579 HIGH POC

CVE-2014-1683 MEDIUM POC

CVE-2012-10055 CRITICAL POC

CVE-2012-1851 CRITICAL

CVE-2012-0809 HIGH POC

CVE-2015-8617 CRITICAL POC

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

CVE-2017-7269 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2023-3519 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

Share

CVE-2021-35331 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy