{"vulnerability": "CVE-2021-4268", "sightings": [{"uuid": "1fa3b32b-b912-4f98-95aa-c6cbbdcef64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4268", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11667", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-4268\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is able to address this issue. The name of the patch is b9039adbb264c81333328faa9575ecf8e0d2be94. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216471.\n\ud83d\udccf Published: 2022-12-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-14T17:29:52.707Z\n\ud83d\udd17 References:\n1. https://github.com/erikdubbelboer/phpRedisAdmin/commit/b9039adbb264c81333328faa9575ecf8e0d2be94\n2. https://github.com/erikdubbelboer/phpRedisAdmin/releases/tag/v1.18.0\n3. https://vuldb.com/?id.216471", "creation_timestamp": "2025-04-14T17:54:32.000000Z"}, {"uuid": "3e848c66-f612-4f99-b874-8b4d05ad2cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4268", "type": "seen", "source": "https://t.me/cibsecurity/55073", "content": "\u203c CVE-2021-4268 \u203c\n\nA vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is able to address this issue. The name of the patch is b9039adbb264c81333328faa9575ecf8e0d2be94. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216471.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T22:13:01.000000Z"}, {"uuid": "b689f68c-ef25-4357-8053-2fc264c30a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42685", "type": "seen", "source": "https://t.me/cibsecurity/33530", "content": "\u203c CVE-2021-42685 \u203c\n\nAn Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks DVM Tools prior to v3.3.1.105 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:23:06.000000Z"}, {"uuid": "57fedbdd-d070-403e-a7d0-a4d62d30349b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42687", "type": "seen", "source": "https://t.me/cibsecurity/33523", "content": "\u203c CVE-2021-42687 \u203c\n\nA Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:22:57.000000Z"}, {"uuid": "8dabebe9-a0c6-487a-aa68-c2e67506982a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42682", "type": "seen", "source": "https://t.me/cibsecurity/33540", "content": "\u203c CVE-2021-42682 \u203c\n\nAn Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:23:22.000000Z"}, {"uuid": "d69507e3-9b9e-4bbf-be96-0a8c1f12d377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42681", "type": "seen", "source": "https://t.me/cibsecurity/33539", "content": "\u203c CVE-2021-42681 \u203c\n\nA Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:23:21.000000Z"}, {"uuid": "c3eafb78-3544-4787-a00b-cf0ad0d7f796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42683", "type": "seen", "source": "https://t.me/cibsecurity/33536", "content": "\u203c CVE-2021-42683 \u203c\n\nA Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:23:15.000000Z"}, {"uuid": "95d9d584-7111-47b5-acb5-d15670d4f251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42688", "type": "seen", "source": "https://t.me/cibsecurity/33532", "content": "\u203c CVE-2021-42688 \u203c\n\nAn Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:23:11.000000Z"}, {"uuid": "40476d25-23f9-4e41-97be-b96ba5688e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42686", "type": "seen", "source": "https://t.me/cibsecurity/33531", "content": "\u203c CVE-2021-42686 \u203c\n\nAn Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:23:07.000000Z"}, {"uuid": "3ae9bf07-00ff-4779-9561-4dada8ed0f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42686", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:05.178405Z"}, {"uuid": "d86810b9-b388-46a3-b8a5-86fe0c70811b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42682", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:05.229159Z"}, {"uuid": "172c1e10-0ba3-468f-b5cc-a02ff93cbfec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42683", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:05.520749Z"}, {"uuid": "4b3a9f2e-2c3e-40b0-8d1a-d3c267488c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42681", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:06.580990Z"}, {"uuid": "1b800da0-5c17-4dcb-a978-0391078de6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42685", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:06.882393Z"}, {"uuid": "59da8019-9e68-426d-b959-b26d7f877596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42687", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:07.173979Z"}, {"uuid": "96d68bfc-31ed-4ff0-8d66-39ba491eb6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42688", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:07.401261Z"}, {"uuid": "4486f2fb-d006-46d9-ac5f-4a0b82b1116c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42686", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:31.686008Z"}, {"uuid": "96b197af-602d-4a5f-b603-8b05c53b0f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42682", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:31.722649Z"}, {"uuid": "68e4adcf-7884-4779-a555-6d400666a7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42683", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:31.931743Z"}, {"uuid": "7f4f5d71-4ec2-42ea-a5ec-f5654bc4429f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42681", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:31.998029Z"}, {"uuid": "a68926e6-5402-46a9-8bdd-44ca63cae291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42685", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:32.342539Z"}, {"uuid": "82dadec2-6089-4927-b516-3b651cb46ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42687", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:32.576896Z"}, {"uuid": "9a6f0fca-2458-4d95-ab3a-0dabde285e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42688", "type": "seen", "source": "https://t.me/hacking_Attack/34117", "content": "Black Hat Ethical Hacking\n27 flaws in USB-over-network SDK affect millions of cloud users\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png 27 flaws in USB-over-network SDK affect millions of cloud usersPost Views: 136 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\nResearchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.\nDue to the pandemic and the rising trend of working from home, organizations have begun to rely heavily on cloud-based services. This necessity also increased cloud providers utilizing Eltima\u2019s SDK that allow employees to mount local USB mass storage devices for use on their cloud-based virtual desktops.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/connecting_USB_via_ethernet.jpg \nCVE-2021-42972, CVE-2021-42973, CVE-2021-42976, CVE-2021-42977, CVE-2021-42979, \nCVE-2021-42980, CVE-2021-42983, CVE-2021-42986, CVE-2021-42987, CVE-2021-42988, \nCVE-2021-42990, CVE-2021-42993, CVE-2021-42994, CVE-2021-42996, CVE-2021-43000, CVE-2021-43002, CVE-2021-43003, CVE-2021-43006, CVE-2021-43637, CVE-2021-43638, CVE-2021-42681, CVE-2021-42682, CVE-2021-42683, CVE-2021-42685, CVE-2021-42686, CVE-2021-42687, CVE-2021-42688These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.\n\nAccording to SentinelOne, the affected software and cloud platforms are:\n\n* Amazon Nimble Studio AMI, before 2021/07/29\n* Amazon NICE DCV, below: 2021.1.7744 (Windows), 2021.1.3560 (Linux), 2021.1.3590 (Mac), 2021/07/30\n* Amazon WorkSpaces agent, below: v1.0.1.1537, 2021/07/31\n* Amazon AppStream client version below: 1.1.304, 2021/08/02\n* NoMachine [all products for Windows], above v4.0.346 below v.7.7.4 (v.6.x is being updated as well)\n* Accops HyWorks Client for Windows: version v3.2.8.180 or older\n* Accops HyWorks DVM Tools for Windows: version 3.3.1.102 or lower (Part of Accops HyWorks product earlier than v3.3 R3)\n* Eltima USB Network Gate below 9.2.2420 above 7.0.1370\n* Amzetta zPortal Windows zClient\n* Amzetta zPortal DVM Tools\n* FlexiHub below 5.2.14094 (latest) above 3.3.11481\n* Donglify below 1.7.14110 (latest) above 1.0.12309\n\nIt is important to note that Sentinel Labs hasn\u2019t looked into all possible products that could incorporate the vulnerable Eltima SDK, so there could be more products affected by the set of flaws.\n\nAlso, some services are vulnerable on[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:32.796910Z"}]}