{"vulnerability": "CVE-2021-2182", "sightings": [{"uuid": "3e5d784d-5c5c-48f6-b6f2-c1a330e5f8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21820", "type": "seen", "source": "https://t.me/cyberbannews_ir/3637", "content": "\u200d \ud83d\uded1\u0631\u0641\u0639 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u062c\u062f\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc \u062f\u06cc \u0644\u06cc\u0646\u06a9\n\n \u0634\u0631\u06a9\u062a \u062f\u06cc \u0644\u06cc\u0646\u06a9 \u0622\u067e\u062f\u06cc\u062a \u0633\u0631\u06cc\u0639 \u0645\u0647\u0646\u062f\u0633\u06cc \u0648 \u0633\u0641\u062a \u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0635\u0644\u0627\u062d \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc  \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0628\u06cc \u0633\u06cc\u0645 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 AC3000 DIR-3040 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f.\n\n\u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u060c \u06a9\u062f\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0631\u0648\u062a\u0631\u0647\u0627\u06cc \u0627\u0635\u0644\u0627\u062d \u0646\u0634\u062f\u0647 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f\u060c \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0633\u0627\u0633 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f \u06cc\u0627 \u0628\u0627 \u0627\u06cc\u062c\u0627\u062f \u062d\u0627\u0644\u062a \u0645\u0646\u0639 \u0633\u0631\u0648\u06cc\u0633\u060c \u0631\u0648\u062a\u0631 \u0631\u0627 \u062f\u0686\u0627\u0631 \u062e\u0631\u0627\u0628\u06cc \u06a9\u0646\u0646\u062f. \n\n\u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 DIR-3040 \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u06cc\u0646 \u0633\u06cc\u0633\u06a9\u0648 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u060c \u0634\u0627\u0645\u0644 \u06af\u0630\u0631\u0648\u0627\u0698\u0647 \u0647\u0627\u0631\u062f \u06a9\u062f \u0634\u062f\u0647\u060c \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0648 \u0628\u0627\u06af \u0647\u0627\u06cc \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u06cc \u0628\u0627\u0634\u062f.\n\n\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0647\u0627\u0631\u062f \u06a9\u062f \u0634\u062f\u0647 \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0645\u062d\u06cc\u0637 \u062a\u0633\u062a \u06a9\u0627\u0631\u06a9\u0631\u062f Libcli \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0631\u0648\u062a Zebra IP \u0627\u06cc\u0646 \u0627\u062c\u0627\u0632\u0647 \u0631\u0627 \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0645\u06cc \u062f\u0647\u0646\u062f \u062a\u0627 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u062f\u06cc \u0644\u06cc\u0646\u06a9 DIR-3040 \u0631\u0627 \u0645\u0648\u0631\u062f \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0647\u0646\u062f. \n\n\u0627\u0645\u0627 \u062f\u06cc \u0644\u06cc\u0646\u06a9 \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0622\u067e\u062f\u06cc\u062a \u0633\u0631\u06cc\u0639 \u0645\u0647\u0646\u062f\u0633\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0631\u062f. \n\n\u0644\u06cc\u0633\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u062f\u06cc \u0644\u06cc\u0646\u06a9 \u0634\u0627\u0645\u0644 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0645\u06cc \u0628\u0627\u0634\u062f:\n\n CVE-2021-21817\n CVE-2021-21819\n CVE-2021-21820\n CVE-2021-21816    \n\n#\u0631\u0648\u062a\u0631\n\n @cyberbannews_ir", "creation_timestamp": "2021-07-18T05:01:26.000000Z"}, {"uuid": "840035e3-e97f-4074-ac92-b657922a955b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21828", "type": "seen", "source": "https://t.me/cibsecurity/27665", "content": "\u203c CVE-2021-21828 \u203c\n\nA heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the default case of DecodeTreeBlock a label is created via CurPath::AddLabel in order to track the label for later reference. An attacker can provide a malicious file to trigger this vulnerability.\n\n? Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-21T02:20:06.000000Z"}, {"uuid": "950fefef-8134-45c4-a684-ed4ee6d2a850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21826", "type": "seen", "source": "https://t.me/cibsecurity/27664", "content": "\u203c CVE-2021-21826 \u203c\n\nA heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecodeTreeBlock` which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An attacker can provide a malicious file to trigger this vulnerability.\n\n? Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-21T02:20:04.000000Z"}, {"uuid": "e8bf717c-9f4f-4065-bc34-b1b8459781f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21827", "type": "seen", "source": "https://t.me/cibsecurity/27663", "content": "\u203c CVE-2021-21827 \u203c\n\nA heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `DecodeTreeBlock` which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An attacker can provide a malicious file to trigger this vulnerability.\n\n? Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-21T02:20:02.000000Z"}, {"uuid": "52b59752-c7b6-4d8b-9319-b07bbbf3083b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21825", "type": "seen", "source": "https://t.me/cibsecurity/27502", "content": "\u203c CVE-2021-21825 \u203c\n\nA heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs\u00e2\u20ac\u2122 Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:48.000000Z"}, {"uuid": "17212812-af1f-4fb9-8039-3ba00a753c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21829", "type": "seen", "source": "https://t.me/cibsecurity/27337", "content": "\u203c CVE-2021-21829 \u203c\n\nA heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs\u00e2\u20ac\u2122 Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-13T22:11:17.000000Z"}, {"uuid": "967bfd63-dc21-43e9-8fc1-92b0da65cc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21820", "type": "seen", "source": "https://t.me/cibsecurity/26211", "content": "\u203c CVE-2021-21820 \u203c\n\nA hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-16T14:27:59.000000Z"}]}