Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2021-42809
PUBLISHED
More InfoOfficial Page
Assigner-THA-PSIRT
Assigner Org ID-9d5917ae-205d-4ae5-8749-1f49479b1395
View Known Exploited Vulnerability (KEV) details
Published At-20 Dec, 2021 | 20:19
Updated At-04 Aug, 2024 | 03:38
Rejected At-
▼CVE Numbering Authority (CNA)
The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library

Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code.

Affected Products
Vendor
Thales
Product
Sentinel Protection Installer
Platforms
  • Windows
Versions
Affected
  • From 7.7.0 through 7.7.0 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-913CWE-913 Improper Control of Dynamically-Managed Code Resources
Type: CWE
CWE ID: CWE-913
Description: CWE-913 Improper Control of Dynamically-Managed Code Resources
Metrics
VersionBase scoreBase severityVector
3.16.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 6.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Update Sentinel Protection Installer to version 7.7.1 or newer.

Configurations
Workarounds
Exploits
Credits
Intel Corp
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://cpl.thalesgroup.com/fr/software-monetization/security-updates
x_refsource_MISC
Hyperlink: https://cpl.thalesgroup.com/fr/software-monetization/security-updates
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://cpl.thalesgroup.com/fr/software-monetization/security-updates
x_refsource_MISC
x_transferred
Hyperlink: https://cpl.thalesgroup.com/fr/software-monetization/security-updates
Resource:
x_refsource_MISC
x_transferred
Details not found