CVE-2021-45917

Published: Jan 3, 2022Modified: Jun 17, 2026

9.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.3 / Impact: 6.0

Source: NVD

Description

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service.

Affected (1)

Products: Sun Moon Jingyao: Network Computer Terminal Protection System Firmware

Sun Moon Jingyao

1 product

Network Computer Terminal Protection System Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sun Moon Jingyao Network Computer Terminal Protection System Firmware	Before 7.20.0401

Running on/with	Platform Versions
Sun Moon Jingyao Network Computer Terminal Protection System	All versions

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://www.twcert.org.tw/tw/cp-132-5433-77f6f-1.html

Source: twcert@cert.org.tw

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-5433-77f6f-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.