CVE-2021-38459: Auvesy Versiondog

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user passwords or delete the database.

Affected products

• Auvesy Versiondog: before 8.0.0 (fixed in 8.0.0)

Published 2021-10-22. Last modified 2026-06-17.