diff --git a/cves/2021/CVE-2021-27132.yaml b/cves/2021/CVE-2021-27132.yaml index d61addb02a..fa6027d1ba 100644 --- a/cves/2021/CVE-2021-27132.yaml +++ b/cves/2021/CVE-2021-27132.yaml @@ -1,13 +1,14 @@ id: CVE-2021-27132 info: - name: CRLF Injection - Sercomm VD625 + name: Sercomm VD625 - CRLF Injection author: geeknik severity: critical - description: Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT_2.1.0 are vulnerable to CRLF Injection via the Content-Disposition header - https://cybertuz.com/blog/post/crlf-injection-CVE-2021-27132 + description: Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT_2.1.0 are vulnerable to Carriage Return Line Feed (CRLF) injection via the Content-Disposition header. reference: - https://cybertuz.com/blog/post/crlf-injection-CVE-2021-27132 - http://sercomm.com + - https://nvd.nist.gov/vuln/detail/CVE-2021-27132 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 @@ -35,3 +36,5 @@ requests: - "X-XSS-Protection:0" part: header condition: and + +# Enhanced by mp on 2022/05/17