SUN & MOON RISE CO., LTD. Shockwall - Improper Input Validation
Priority LOW 17CWE-20Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially.
Why it matters now
EPSS 0.00312 24th percentileScored 2026-11-07
Fix Fixed Shockwall (SUN & MOON RISE CO., LTD.): 7.20.0401
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| SUN & MOON RISE CO., LTD. | Shockwall | before 7.20.0401 | 7.20.0401 | Patch available | CNA |
- Shockwall VendorSUN & MOON RISE CO., LTD. Affected before 7.20.0401 Fixed in 7.20.0401 Patch available CNA
Remediation
- Fix · CNA Shockwall (SUN & MOON RISE CO., LTD.) Fixed in 7.20.0401
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
SUN & MOON RISE Shockwall 7.20.0401
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2021-20926 SUN & MOON RISE CO., LTD. Shockwall - Improper AuthenticationPriority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2021-45916
- 2026-10-03 Alias added: GHSA-v723-7fm6-5c8m
References
Sources
- CVE-2021-45916 · CVE Program
- CVE-2021-45916 · NVD
- FIRST EPSS
- GHSA-v723-7fm6-5c8m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences