CVE-2021-31988: A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF)…

PriorityP343high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EPSS

0.92%

56.4th percentile

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SMTP headers in the generated test email.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
axis	axis_os	< 10.7	10.7
axis	axis_os_2016	< 6.50.5.5	6.50.5.5
axis	axis_os_2018	< 8.40.4.3	8.40.4.3
axis	axis_os_2020	< 9.80.3.5	9.80.3.5
axis_communications_ab	axis_os	—	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.