CVE-2021-36798

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 server thread and block beacons' communication with it.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/Exploit, Third Party Advisory
https://www.cobaltstrike.com/releasenotes.txtRelease Notes, Vendor Advisory
https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/Exploit, Third Party Advisory
https://www.cobaltstrike.com/releasenotes.txtRelease Notes, Vendor Advisory

Timeline

Published: Aug 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-367998.8KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project i CVE-2021-36804.9showdoc is vulnerable to Missing Cryptographic Step CVE-2021-368009.1Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /{com CVE-2021-368018.1Akaunting version 2.1.12 and earlier suffers from an authentication bypass issue in the user-controllable field, companies[0]. This issue wa CVE-2021-368026.5Akaunting version 2.1.12 and earlier suffers from a denial-of-service issue that is triggered by setting a malformed 'locale' variable and s CVE-2021-368035.4Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplie CVE-2021-368048.1Akaunting version 2.1.12 and earlier suffers from a password reset spoofing vulnerability, wherein an attacker can proxy password reset requ CVE-2021-368054.8Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the sales invoice proce CVE-2021-368066.1A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sophos Email Appliance CVE-2021-368078.8An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.CVE-2021-368087.0A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.CVE-2021-368096.0A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a