← back
CVE-2021-22755

CVE-2021-22755

EPSS 1.3%CWE-787
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS EPSS 1.3%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
11 Jun 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied data, when a malicious CGF file is imported to IGSS Definition.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →