CVE-2021-30110

CVE-2021-30110 describes a critical remote code execution vulnerability in Greyware Automation Products Inc Domain Time II, specifically affecting versions prior to 5.2.b.20210331. An attacker can exploit this by spoofing a UDP response to the software's update check, directing dttray.exe to a malicious update URL. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it requires user interaction and high attack complexity. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.