CVE-2021-38455

The affected product’s OS Service does not verify any given parameter. A user can supply any type of parameter that will be passed to inner calls without checking the type of the parameter or the value.

• CWE-20

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Patch, Third Party Advisory, US Government Resource
• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Patch, Third Party Advisory, US Government Resource

Published

Oct 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3845ws-scrcpy is vulnerable to External Control of File Name or …7.5
• CVE-2021-38450The affected controllers do not properly sanitize the input …8.8
• CVE-2021-38451The affected product’s proprietary protocol CSC allows for c…5.7
• CVE-2021-38452A path traversal vulnerability in the Moxa MXview Network Ma…9.1
• CVE-2021-38453Some API functions allow interaction with the registry, whic…9.1
• CVE-2021-38454A path traversal vulnerability in the Moxa MXview Network Ma…10
• CVE-2021-38456A use of hard-coded password vulnerability in the Moxa MXvie…9.8
• CVE-2021-38457The server permits communication without any authentication …9.8
• CVE-2021-38458A path traversal vulnerability in the Moxa MXview Network Ma…9.8
• CVE-2021-38459The data of a network capture of the initial handshake phase…9.8
• CVE-2021-3846firefly-iii is vulnerable to Unrestricted Upload of File wit…8.8
• CVE-2021-38460A path traversal vulnerability in the Moxa MXview Network Ma…7.5