CVE-2021-31227

CVE-2021-31227 is a heap buffer overflow vulnerability affecting HCC embedded InterNiche 4.0.1, specifically within the HTTP POST request parsing function. An attacker can exploit this by sending a malformed HTTP packet with a negative Content-Length, bypassing size checks and causing a large overflow in the wbs_multidata buffer. Rated 7.5 HIGH, this vulnerability has a network attack vector, low attack complexity, and can lead to high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it did receive limited media coverage.