CVE-2021-38479

Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer.

• CWE-787

• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Patch, Third Party Advisory, US Government Resource
• https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01Patch, Third Party Advisory, US Government Resource

Published

Oct 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38473The affected product’s code base doesn’t properly control ar…8.8
• CVE-2021-38474InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…9.8
• CVE-2021-38475The database connection to the server is performed by callin…8.8
• CVE-2021-38476InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…5.3
• CVE-2021-38477There are multiple API function codes that permit reading an…9.8
• CVE-2021-38478InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…9.1
• CVE-2021-3848An arbitrary file creation by privilege escalation vulnerabi…5.5
• CVE-2021-38480InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…8.8
• CVE-2021-38481The scheduler service running on a specific TCP port enables…9.8
• CVE-2021-38482InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…4.8
• CVE-2021-38483The affected product is vulnerable to misconfigured binaries…5.7
• CVE-2021-38484InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.…7.2