CVE-2021-27852—Checkbox Survey Deserialization of Untrusted Data Vulnerability

漏洞名称

Checkbox Survey Deserialization of Untrusted Data Vulnerability

描述

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2021-27852

相关 CWE

• CWE-502