CVE-2021-38453

Some API functions allow interaction with the registry, which includes reading values as well as data modification.

• CWE-15

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Patch, Third Party Advisory, US Government Resource
• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Patch, Third Party Advisory, US Government Resource

Published

Oct 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38448The affected controllers do not properly sanitize the input …7.6
• CVE-2021-38449Some API functions permit by-design writing or copying data …9.8
• CVE-2021-3845ws-scrcpy is vulnerable to External Control of File Name or …7.5
• CVE-2021-38450The affected controllers do not properly sanitize the input …8.8
• CVE-2021-38451The affected product’s proprietary protocol CSC allows for c…5.7
• CVE-2021-38452A path traversal vulnerability in the Moxa MXview Network Ma…9.1
• CVE-2021-38454A path traversal vulnerability in the Moxa MXview Network Ma…10
• CVE-2021-38455The affected product’s OS Service does not verify any given …6.5
• CVE-2021-38456A use of hard-coded password vulnerability in the Moxa MXvie…9.8
• CVE-2021-38457The server permits communication without any authentication …9.8
• CVE-2021-38458A path traversal vulnerability in the Moxa MXview Network Ma…9.8
• CVE-2021-38459The data of a network capture of the initial handshake phase…9.8