{"id":"CVE-2021-26621","aliases":["EUVD-2021-13415","GHSA-8gwh-x546-9265"],"status":"published","title":"Netis Korea MEX01 Buffer overflow vulnerability","description":"An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01737,"percentile":0.78033,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2022-03-25T18:02:38Z","modified":"2026-06-17T03:43:34Z","products":[{"vendor":"netu","product":"mex01_firmware"},{"vendor":"netu corp.","product":"mex01"}],"references":[{"url":"https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66579","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26621"},{"url":"https://github.com/advisories/GHSA-8gwh-x546-9265"}],"sources":{"cve":[{"id":"CVE-2021-26621","title":"Netis Korea MEX01 Buffer overflow vulnerability","description":"An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.","status":"published","published":"2022-03-25T18:02:38Z","modified":"2024-08-03T20:26:25.557Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:32:57.033395Z"}],"euvd":[{"id":"EUVD-2021-13415","description":"An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.","status":"published","published":"2022-03-25T18:02:38Z","modified":"2024-08-03T20:26:25Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:24:51.40664Z"}],"ghsa":[{"id":"GHSA-8gwh-x546-9265","title":"An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote...","description":"An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.","status":"published","published":"2022-03-26T00:00:31Z","modified":"2023-01-27T05:01:01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:41:47.978566Z"}],"nvd":[{"id":"CVE-2021-26621","description":"An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.","status":"published","published":"2022-03-25T19:15:08.77Z","modified":"2026-06-17T03:43:34.78Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:05.581807Z"}]}}