CVE-2021-46167

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data and cause a Denial of Service (DoS).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://wizplat.com/PRODUCT1_3/?idx=217Broken Link
https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-w8x7-9p5m-2vx4Exploit, Third Party Advisory
https://www.amazon.in/High-Speed-Recognition-Fingerprint-Encrypted-Security/dp/B07BRH1GF5/ref=cm_cr_arp_d_product_top?ie=UTF8Product, Third Party Advisory
https://www.ebay.com/itm/DM-32GB-Fingerprint-Encrypted-Pen-Drive-Secure-Memory-USB-Stick-AES256/202929723426?hash=item2f3f8dd822:g:mugAAOSwz8NbgQKfProduct, Third Party Advisory
http://wizplat.com/PRODUCT1_3/?idx=217Broken Link
https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-w8x7-9p5m-2vx4Exploit, Third Party Advisory
https://www.amazon.in/High-Speed-Recognition-Fingerprint-Encrypted-Security/dp/B07BRH1GF5/ref=cm_cr_arp_d_product_top?ie=UTF8Product, Third Party Advisory
https://www.ebay.com/itm/DM-32GB-Fingerprint-Encrypted-Pen-Drive-Secure-Memory-USB-Stick-AES256/202929723426?hash=item2f3f8dd822:g:mugAAOSwz8NbgQKfProduct, Third Party Advisory

Timeline

Published: Apr 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-461685.5Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c.CVE-2021-461695.5Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache.CVE-2021-461707.5An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.CVE-2021-461715.5Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c.CVE-2021-461747.5Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.CVE-2021-461796.5Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx CVE-2021-461955.5GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attacke CVE-2021-461989.8An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.CVE-2021-462009.8An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php.CVE-2021-462019.8An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node.CVE-2021-462036.5Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.CVE-2021-462049.8Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\