CVE-2021-38453

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Some API functions allow interaction with the registry, which includes reading values as well as data modification.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-15

Affected software

No affected versions have been published.

Timeline

Published
Oct 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-3845410.0A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwCVE-2021-384556.5The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner CVE-2021-384569.8A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gaiCVE-2021-384579.8The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without pCVE-2021-384589.8A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwCVE-2021-384599.8The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarCVE-2021-38468.8firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous TypeCVE-2021-384607.5A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwCVE-2021-384618.2The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries.CVE-2021-384629.8InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy. This may allow an attackeCVE-2021-384638.1The affected product does not properly control the allocation of resources. A user may be able to allocate unlimited memory buffers using APCVE-2021-384647.4InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to inte
CVE-2021-38453: Critical severity, CVSS 9.1 | Vulnix