CVE-2021-27852 — Checkbox Survey Deserialization of Untrusted Data Vulnerability

CISA KEV listed Added April 11, 2022 Remediate by May 2, 2022

Description

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.

Required action

Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-27852

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer