CVE-2021-20109

Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as well as receive the agent's HTTP request verifying its authtoken. In AEAgent.cpp, the agent responding back over HTTP is vulnerable to a Heap Overflow if the POST payload response is too large. The POST payload response is converted to Unicode using vswprintf. This is written to a buffer only 0x2000 bytes big. If POST payload is larger, then heap overflow will occur.

• CWE-787

• https://www.tenable.com/security/research/tra-2021-30Third Party Advisory
• https://www.tenable.com/security/research/tra-2021-30Third Party Advisory

Published

Jul 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20103Machform prior to version 16 is vulnerable to stored cross-s…6.1
• CVE-2021-20104Machform prior to version 16 is vulnerable to unauthenticate…8.1
• CVE-2021-20105Machform prior to version 16 is vulnerable to an open redire…6.1
• CVE-2021-20106Nessus Agent versions 8.2.5 and earlier were found to contai…6.5
• CVE-2021-20107There exists an unauthenticated BLE Interface in Sloan Smart…5.4
• CVE-2021-20108Manage Engine Asset Explorer Agent 1.0.34 listens on port 90…7.5
• CVE-2021-2011Vulnerability in the MySQL Client product of Oracle MySQL (c…5.9
• CVE-2021-20110Due to Manage Engine Asset Explorer Agent 1.0.34 not validat…9.8
• CVE-2021-20111A stored cross-site scripting vulnerability exists in TCExam…5.4
• CVE-2021-20112A stored cross-site scripting vulnerability exists in TCExam…5.4
• CVE-2021-20113An exposure of sensitive information vulnerability exists in…5.3
• CVE-2021-20114When installed following the default/recommended settings, T…7.5