CVE-2021-42111

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code.

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-42111
• https://excellium-services.com/cve-2021-42111/Third Party Advisory
• https://excellium-services.com/cve-2021-42111/Third Party Advisory

Published

Nov 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42106Unnecessary privilege vulnerabilities in Trend Micro Apex On…7.8
• CVE-2021-42107Unnecessary privilege vulnerabilities in Trend Micro Apex On…7.8
• CVE-2021-42108Unnecessary privilege vulnerabilities in the Web Console of …7.8
• CVE-2021-42109VITEC Exterity IPTV products through 2021-04-30 allow privil…9.8
• CVE-2021-4211A potential vulnerability in the SMI callback function used …6.7
• CVE-2021-42110An issue was discovered in Allegro Windows (formerly Popsy W…7.8
• CVE-2021-42112The "File upload question" functionality in LimeSurvey 3.x-L…6.1
• CVE-2021-42113An issue was discovered in StorageSecurityCommandDxe in Insy…8.2
• CVE-2021-42114Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vul…8.3
• CVE-2021-42115Missing HTTPOnly flag in Web Applications operating on Busin…9.1
• CVE-2021-42116Incorrect Access Control in Web Applications operating on Bu…4.3
• CVE-2021-42117Insufficient Input Validation in Web Applications operating …5.4