CVE-2021-37786

{"id": "CVE-2021-37786", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.9}]}, "published": "2021-09-27T14:15:08.583", "references": [{"url": "https://github.com/admin-ch/CovidCertificate-App-iOS/issues/146", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/admin-ch/CovidCertificate-App-iOS/issues/146", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-755"}]}], "descriptions": [{"lang": "en", "value": "Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Certificate Check App IOS 2.2.0 and below affected, patch in progress. A denial of service (physically proximate) could be caused by scanning a crafted QR code."}, {"lang": "es", "value": "Determinados productos de la Oficina Federal de Sistemas de Tecnolog\u00eda de la Informaci\u00f3n y Telecomunicaciones FOITT est\u00e1n afectadas por un manejo inapropiado de condiciones excepcionales. Esto afecta a COVID Certificate App IOS versi\u00f3n 2.2.0 y por debajo afectada, parche en curso y COVID Certificate Check App IOS versi\u00f3n 2.2.0 y por debajo afectada, parche en curso. Se podr\u00eda causar una denegaci\u00f3n de servicio (f\u00edsicamente pr\u00f3xima) al escanear un c\u00f3digo QR dise\u00f1ado"}], "lastModified": "2024-11-21T06:15:54.303", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bag:covid_certificate:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "6BE6A000-79F1-4751-AD7C-90B59914BB55", "versionEndIncluding": "2.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}