CVE-2021-47772

10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.10-strike.com/	Product
https://www.exploit-db.com/exploits/50472	Exploit Third Party Advisory
https://www.exploit-db.com/exploits/50472	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:10-strike:network_inventory_explorer:9.31:*:*:*:pro:*:*:*

History

17 Jun 2026, 04:18

Type	Values Removed	Values Added
Summary		(es) 10-Strike Network Inventory Explorer Pro 9.31 contiene una vulnerabilidad de desbordamiento de búfer en la funcionalidad de importación de archivos de texto que permite la ejecución remota de código. Los atacantes pueden crear un archivo de texto malicioso con una carga útil cuidadosamente construida para activar una shell inversa y ejecutar código arbitrario en el sistema objetivo.

23 Jan 2026, 18:08

Type	Values Removed	Values Added
First Time		10-strike network Inventory Explorer 10-strike
CPE		cpe:2.3:a:10-strike:network_inventory_explorer:9.31::::pro:::
References	~~() https://www.10-strike.com/ -~~	() https://www.10-strike.com/ - Product
References	~~() https://www.exploit-db.com/exploits/50472 -~~	() https://www.exploit-db.com/exploits/50472 - Exploit, Third Party Advisory

15 Jan 2026, 19:16

Type	Values Removed	Values Added
References	~~() https://www.exploit-db.com/exploits/50472 -~~	() https://www.exploit-db.com/exploits/50472 -

15 Jan 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-15 16:16

Updated : 2026-06-17 04:18

NVD link : CVE-2021-47772

Mitre link : CVE-2021-47772

CVE.ORG link : CVE-2021-47772

JSON object : View

Products Affected

10-strike

network_inventory_explorer

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2021-47772", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2021-47772", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-01-15T16:12:36.193571Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "10-Strike", "product": "Strike Network Inventory Explorer Pro", "versions": [{"status": "affected", "version": "9.31"}]}]}], "published": "2026-01-15T16:16:08.837", "references": [{"url": "https://www.10-strike.com/", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/50472", "tags": ["Exploit", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/50472", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system."}, {"lang": "es", "value": "10-Strike Network Inventory Explorer Pro 9.31 contiene una vulnerabilidad de desbordamiento de b\u00fafer en la funcionalidad de importaci\u00f3n de archivos de texto que permite la ejecuci\u00f3n remota de c\u00f3digo. Los atacantes pueden crear un archivo de texto malicioso con una carga \u00fatil cuidadosamente construida para activar una shell inversa y ejecutar c\u00f3digo arbitrario en el sistema objetivo."}], "lastModified": "2026-06-17T04:18:27.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:10-strike:network_inventory_explorer:9.31:*:*:*:pro:*:*:*", "vulnerable": true, "matchCriteriaId": "F7CED6E9-86A3-4483-B0F1-95358C610A0E"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}