Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.7
CVE-2021-47705: COMMAX UMS Client ActiveX Control may allow hackers to run malicious code
CVE-2021-47705 · published 11 months ago
Summary
The COMMAX UMS Client ActiveX Control has a security flaw that can be exploited by hackers to run unauthorized code on your system. This can happen if an attacker sends a specially crafted input to the software. To protect your system, update the COMMAX UMS Client ActiveX Control to the latest version.
Original advisory text
COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through mul...
COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long string arrays through multiple functions. Attackers can exploit improper boundary validation in CNC_Ctrl.dll to cause heap corruption and potentially gain system-level access.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-787Out-of-bounds Write
Timeline
Published9 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2021-47705 · NVD
Track software like this
Free during beta