CVE-2021-21783

PoC —

CVSS 3.1

9.8 critical

EPSS

5%p92

Published

Mar 25, 2021 (Mar 25, 2021)

Modified

Jun 17, 2026

Description

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Vendors: genivia oracle
Products: gsoap, communications diameter signaling router, communications eagle application processor, communications eagle lnp application processor, communications lsms, tekelec virtual operating environment
Weakness: CWE-680, CWE-190
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.0%)

In the news0 stories

No ingested article mentions this CVE yet.