TVN ID	TVN-202111002
CVE ID	CVE-2021-42338
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	4MOSAn GCB Doctor ver.20210708(v2.0)
Description	4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.
Solution	Update 4MOSAn GCB Doctor version to 20210811 (v2.0)
Credit	Meng Yi Chou
Public Date	2021-11-19