Read the docs
TI-2021-20926 Aliases CVE-2021-45917GHSA-vq34-7c65-chv9

SUN & MOON RISE CO., LTD. Shockwall - Improper Authentication

Priority LOW 39CWE-287Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service.

Why it matters now

EPSS 0.00466 40th percentileScored 2026-11-07
Fix Fixed Shockwall (SUN & MOON RISE CO., LTD.): 7.20.0401

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUN & MOON RISE CO., LTD.Shockwallbefore 7.20.04017.20.0401Patch availableCNA
  • Shockwall VendorSUN & MOON RISE CO., LTD. Affected before 7.20.0401 Fixed in 7.20.0401 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:sun_moon_jingyao:network_computer_terminal_protection_system_firmware:*:*:*:*:*:*:*:*before 7.20.0401VulnerableSun Moon Jingyao
cpe:2.3:h:sun_moon_jingyao:network_computer_terminal_protection_system:*:*:*:*:*:*:*:*all versionsRunning onSun Moon Jingyao
  • cpe:2.3:o:sun_moon_jingyao:network_computer_terminal_protection_system_firmware:*:*:*:*:*:*:*:* Versions before 7.20.0401 Vulnerable ·Sun Moon Jingyao
  • cpe:2.3:h:sun_moon_jingyao:network_computer_terminal_protection_system:*:*:*:*:*:*:*:* Versions all versions Running on ·Sun Moon Jingyao

Remediation

  • Fix · CNA Shockwall (SUN & MOON RISE CO., LTD.) Fixed in 7.20.0401

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    SUN & MOON RISE Shockwall 7.20.0401

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2021-20925 SUN & MOON RISE CO., LTD. Shockwall - Improper Input ValidationPriority LOW 17
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-45917
  2. 2026-10-03 Alias added: GHSA-vq34-7c65-chv9

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences