CVE-2021-44154

An issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/edit_opt, which will then be triggered when running the diagnostics (via /goform/diagnostics_doit), resulting in a buffer overflow.

• CWE-120

• http://packetstormsecurity.com/files/165193/Reprise-License-Manager-14.2-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yesPatch, Product, Vendor Advisory
• http://packetstormsecurity.com/files/165193/Reprise-License-Manager-14.2-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yesPatch, Product, Vendor Advisory

Published

Dec 13, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44149An issue was discovered in Trusted Firmware OP-TEE Trusted O…7.8
• CVE-2021-4415The Sunshine Photo Cart plugin for WordPress is vulnerable t…4.3
• CVE-2021-44150The client in tusdotnet through 2.5.0 relies on SHA-1 to pre…7.5
• CVE-2021-44151An issue was discovered in Reprise RLM 14.2. As the session …7.5
• CVE-2021-44152An issue was discovered in Reprise RLM 14.2. Because /goform…9.8
• CVE-2021-44153An issue was discovered in Reprise RLM 14.2. When editing th…7.2
• CVE-2021-44155An issue was discovered in /goform/login_process in Reprise …5.3
• CVE-2021-44158ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buff…8
• CVE-2021-441594MOSAn GCB Doctor’s file upload function has improper user p…9.8
• CVE-2021-4416The wp-mpdf plugin for WordPress is vulnerable to Cross-Site…4.3
• CVE-2021-44160Carinal Tien Hospital Health Report System’s login page has …7.3
• CVE-2021-44161Changing MOTP (Mobile One Time Password) system’s specific f…8.8