← Back

CVE-2021-20702

nvd nist
Published: Nov 3, 2021Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network.

Affected (4)

Nec
4 products
Clusterpro X
Clusterpro X Singleserversafe
Expresscluster X
Expresscluster X Singleserversafe
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Clusterpro X
From 1.0 to 4.3
Clusterpro X Singleserversafe
From 1.0 to 4.3
Expresscluster X
From 1.0 to 4.3
Expresscluster X Singleserversafe
From 1.0 to 4.3

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

Source: psirt-info@cyber.jp.nec.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.