CVE-2021-28847 describes a denial-of-service vulnerability in MobaXterm versions prior to 21.0, where a remote server can cause the Windows GUI to hang by rapidly sending tab title change requests. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely with low complexity to achieve high availability impact. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, including an article from BleepingComputer.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 21.0CPE matchmatch criteria | cpe:2.3:a:mobatek:mobaxterm:*:*:*:*:home:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.