CVE-2021-36798: High severity cobalt strike vulnerability

Published Aug 9, 2021

Updated

A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 server thread and block beacons' communication with it.

Affected Software

2 affected components

HelpSystems Cobalt Strike=4.2

HelpSystems Cobalt Strike=4.3

Event History

Aug 9, 2021

CVE Published

via MITRE·12:38 PM

Data Sourced

via MITRE·12:38 PM

Description

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-36798.

What is the severity of CVE-2021-36798?

The severity of CVE-2021-36798 is high with a CVSS score of 7.5.

What is the affected software?

The affected software is HelpSystems Cobalt Strike versions 4.2 and 4.3.

How does CVE-2021-36798 impact HelpSystems Cobalt Strike?

CVE-2021-36798 allows remote attackers to crash the C2 server thread and block beacons' communication with it, causing a denial-of-service (DoS) situation.

Are there any references for CVE-2021-36798?

Yes, you can find references for CVE-2021-36798 at the following links: [Link1](https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/) and [Link2](https://www.cobaltstrike.com/releasenotes.txt).