CVE-2021-46082

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via crafted packets.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

No affected versions have been published.

Timeline

Published: Feb 18, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-460835.4uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via the input box of the statistical code.CVE-2021-460845.4uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via "close registration information" input box.CVE-2021-460856.5OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority CVE-2021-460867.5xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There i CVE-2021-460875.4In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameter CVE-2021-460887.2Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run cus CVE-2021-460899.8In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.CVE-2021-460939.8eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.CVE-2021-460978.8Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log CVE-2021-461017.5In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.CVE-2021-461027.5From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_val CVE-2021-461047.5An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on th