CVE-2021-47813 MEDIUM

CVE-2021-47813: Backup Key Recovery 2.2.7 - Denial of Service (PoC)

Vendor Nsauditor
Product Backup Key Recovery
Weakness CWE-120
Published January 15, 2026
Last update January 16, 2026

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a large buffer of 256 repeated characters into the registration key field to trigger application instability and potential crash.

Key dates

02Disclosure timeline

January 15, 2026 CVE published
January 16, 2026 Record updated