CVE-2021-26621: Netis Korea MEX01 Buffer overflow vulnerability

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-25 · updated 2026-06-17
Weakness: CWE-120

Description

An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function.

Affected products

NetU Corp. MEX01: before 1.9.18 — fixed in 1.9.18

How to fix

Upgrade to a fixed version: NetU Corp. MEX01 1.9.18. Check the vendor advisory for mitigations.

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66579
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66579

Get alerted when CVE-2021-26621 or the next vulnerability affects your stack