CVE-2021-41615

CVE-2021-41615 is a critical vulnerability in GoAhead WebServer 2.1.8 and derivative works, stemming from insufficient nonce entropy in websda.c due to a hardcoded value, violating HTTP Digest Access Authentication standards. With a CVSS score of 9.8, it presents a severe risk as an unauthenticated attacker can achieve full compromise (confidentiality, integrity, availability) over the network with low attack complexity. Despite its age, the vulnerability remains relevant in derivative products. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, though its high FAUCET Risk Score indicates potential for future attention.