Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-27132: SerComm AG Combo VD625 devices at risk of file download tampering
CVE-2021-27132 · published 5 years ago
Summary
SerComm AG Combo VD625 devices have a security flaw that could allow attackers to manipulate files downloaded from these devices. This could lead to malicious files being sent to users, potentially causing harm to their systems. It's recommended to update the device to the latest version to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sercomm | agcombo_vd625_firmware |
agsot_2.1.0 cpe:2.3:o:sercomm:agcombo_vd625_firmware:agsot_2.1.0:*:*:*:*:*:*:* |
Original advisory text
SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.
SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.
References
- https://cybertuz.com/blog/post/crlf-injection-CVE-2021-27132 Exploit Third Party Advisory
Severity
9.8
Critical
Type
CWE-74Injection
Timeline
Published27 Feb 2021
Updated15 Oct 2026
First seen5 Jul 2026
Track software like this
Free during beta