A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. The Old API Support service (clpoldapi.exe) is the system service component tasked with backwards compatibility and utilizes a random port between 1000 and 1500. This vulnerability occurs during the processing of opcode 0x1D within the Old API service. An attacker is able to introduce crafted data into the clptrnsv service to allow for arbitrary code execution.
- Exodus Intelligence: EIP-2ba7cebd
- MITRE CVE: CVE-2021-20704
- CVSSv2 Score: 10.0
- Exodus Intelligence
- Disclosed to affected vendor: February 25th, 2021
- Disclosed to public: October 29th, 2021
Readers of this advisory who are interested in receiving further details around the vulnerability, mitigations, detection guidance, and more can contact us at firstname.lastname@example.org.
Researchers who are interested in monetizing their 0Day and NDay can work with us through our Research Sponsorship Program.