CVE-2021-42311

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

Microsoft Defender for IoT Remote Code Execution Vulnerability

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
MicrosoftMicrosoft Defender for IoT>= 22.0.0, < 10.5.2

References

Timeline

Published
Dec 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-423127.8Microsoft Defender for IoT Elevation of Privilege VulnerabilityCVE-2021-4231310.0Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-423148.8Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-423158.8Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-423168.8Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2021-423194.7Visual Studio Elevation of Privilege VulnerabilityCVE-2021-42326.1A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manCVE-2021-423205.7Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-423218.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-423227.8Visual Studio Code Elevation of Privilege VulnerabilityCVE-2021-423233.3Azure RTOS Information Disclosure VulnerabilityCVE-2021-423247.4An issue was discovered on DCN (Digital China Networks) S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the
CVE-2021-42311: Critical severity, CVSS 10.0 | Vulnix