CVE-2021-3422

The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index Universal Forwarder traffic. The vulnerability impacts Splunk Enterprise versions before 7.3.9, 8.0 versions before 8.0.9, and 8.1 versions before 8.1.3. It does not impact Universal Forwarders. When Splunk forwarding is secured using TLS or a Token, the attack requires compromising the certificate or token, or both. Implementation of either or both reduces the severity to Medium.

• CWE-125
• CWE-20

• https://claroty.com/2022/03/24/blog-research-locking-down-splunk-enterprise-indexers-and-forwarders/Third Party Advisory
• https://www.splunk.com/en_us/product-security/announcements/svd-2022-0301.htmlVendor Advisory
• https://claroty.com/2022/03/24/blog-research-locking-down-splunk-enterprise-indexers-and-forwarders/Third Party Advisory
• https://www.splunk.com/en_us/product-security/announcements/svd-2022-0301.htmlVendor Advisory

Published

Mar 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34203D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access…8.1
• CVE-2021-34204D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Pro…6.8
• CVE-2021-34207Cross-site scripting in ddns.htm in TOTOLINK A3002R version …6.1
• CVE-2021-3421A flaw was found in the RPM package in the read functionalit…5.5
• CVE-2021-34215Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R vers…6.1
• CVE-2021-34218Directory Indexing in Login Portal of Login Portal of TOTOLI…5.3
• CVE-2021-34220Cross-site scripting in tr069config.htm in TOTOLINK A3002R v…6.1
• CVE-2021-34223Cross-site scripting in urlfilter.htm in TOTOLINK A3002R ver…6.1
• CVE-2021-34228Cross-site scripting in parent_control.htm in TOTOLINK A3002…6.1
• CVE-2021-3423Uncontrolled Search Path Element vulnerability in the openss…7.8
• CVE-2021-34235Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injecti…9.8
• CVE-2021-34236Buffer Overflow in Netgear R8000 Router with firmware v1.0.4…9.8