What’s Vulnerable › Vulnerabilities

CVE-2021-42777

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-10-29 · updated 2026-06-17
• Weakness: CWE-209

Description

Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a report, including the application server or a user's local machine, as demonstrated by System.Diagnostics.Process.Start.

Affected products

• Stimulsoft Reports: 2013.1.1600.0

References

• http://burninatorsec.blogspot.com/2022/04/library-rce-object-chaining-cve-2021.html
• http://burninatorsec.blogspot.com/2022/04/library-rce-object-chaining-cve-2021.html

Get alerted when CVE-2021-42777 or the next vulnerability affects your stack