CVE-2021-47764 MEDIUM

CVE-2021-47764: AbsoluteTelnet 11.24 - 'Phone' Denial of Service (PoC)

Vendor Celestialsoftware
Product AbsoluteTelnet
Weakness CWE-787
Published January 15, 2026
Last update February 18, 2026

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields. Attackers can generate a 1000-character payload and paste it into specific input fields to trigger application crashes and force unexpected termination.

Key dates

02Disclosure timeline

January 15, 2026 CVE published
February 18, 2026 Record updated