CVEs-PoC/2021/CVE-2021-30110.md

CVE-2021-30110

Description

dttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed response to the UDP query used to check for updates.

POC

Reference

• https://blog.grimm-co.com/2021/04/time-for-upgrade.html
• https://blog.grimm-co.com/2021/04/time-for-upgrade.html

Github

No PoCs found on GitHub currently.