BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2021-27852Checkbox Survey Deserialization of Untrusted Data Vulnerability

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Checkbox Survey versions prior to 7.

9.8 CRITICALEPSS 30.25%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
9.8CRITICAL3.1certcc (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P

CISA required action

⚡ Known exploited · remediation due May 2, 2022

Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.

Details

CVE ID
CVE-2021-27852
Status
Analyzed
Assigner (CNA)
certcc
Published
May 27, 2021
Last modified
2026-06-17 03:45 UTC
Weaknesses

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 13:35 UTC.