CVE-2021-47813CWE-120

Backup Key Recovery 2.2.7 - Denial of Service (PoC)

Medium · published January 15, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

⚠️ Just a simple buffer overflow can bring the application crashing down! By overflowing the registration code input with 256 characters, attackers can trigger instability in Backup Key Recovery 2.2.7. 🔥 Think of it like trying to stuff too many bags in a small taxi—eventually, it just can't take any more and breaks down on the side of the road! In this case, the application simply can't handle the oversized input and fails spectacularly. This vulnerability could lead to users experiencing downtime, especially if the application crashes during critical operations. Imagine the frustration of users unable to access their important backups due to a denial of service caused by a simple, oversized input!

Put simply

Think of it like trying to stuff too many bags in a small taxi—eventually, it just can't take any more and breaks down on the side of the road! In this case, the application simply can't handle the oversized input and fails spectacularly. This vulnerability arises from a lack of proper input validation on the registration key field, allowing an attacker to overflow it by inputting an excessively long string, leading to application instability or crashing.

What to do

This vulnerability could lead to users experiencing downtime, especially if the application crashes during critical operations. Imagine the frustration of users unable to access their important backups due to a denial of service caused by a simple, oversized input! To mitigate this risk, update Backup Key Recovery to version 2.2.8 or later to ensure proper input handling. Additionally, consider implementing input length restrictions to prevent future overflow attacks. Regularly audit and test your applications to catch such issues proactively. You've got this! With these steps, you'll have your application running smoothly in no time! 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00400 · 33.1th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-15T23:25Z
EPSS history
Timeline
  • 15 JAN 23:25Z
    Backup Key Recovery 2.2.7 - Denial of Service (PoC)
    cvelistv5