Cyber Resilience

CVE-2021-47827

MediumPublic PoC

Published: 16 January 2026

Published
16 January 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0003 9.4th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-47827 is a medium-severity Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability in Apple (inferred from references). Its CVSS base score is 4.6 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 9.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2021-47827 is a denial of service vulnerability in the mashREPL tool of WebSSH for iOS version 14.16.10. The issue allows attackers to crash the application by pasting malformed input, such as a 300-character buffer of repeated 'A' characters into the mashREPL input field. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and maps to CWE-1284.

The vulnerability can be exploited by any network-accessible attacker requiring low complexity, no privileges, and no user interaction. Exploitation crashes the WebSSH iOS application, resulting in a denial of service with high availability impact but no confidentiality or integrity effects.

Advisories and related resources include the WebSSH app page on the Apple App Store, an exploit proof-of-concept published on Exploit-DB (ID 49883), and a VulnCheck advisory detailing the WebSSH for iOS mashREPL denial of service. No specific patch or mitigation details are outlined in the provided references.

EU & UK References

Vulnerability details

WebSSH for iOS 14.16.10 contains a denial of service vulnerability in the mashREPL tool that allows attackers to crash the application by pasting malformed input. Attackers can trigger the vulnerability by copying a 300-character buffer of repeated 'A' characters into…

more

the mashREPL input field, causing the application to crash.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Malformed input triggers application crash via unvalidated buffer, directly enabling Endpoint DoS through software exploitation (T1499.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2021-47831Shared CWE-1284
CVE-2021-47818Shared CWE-1284
CVE-2026-25863Shared CWE-1284
CVE-2026-8813Shared CWE-1284
CVE-2021-47824Shared CWE-1284
CVE-2025-12664Shared CWE-1284
CVE-2025-65548Shared CWE-1284
CVE-2025-14511Shared CWE-1284
CVE-2021-47821Shared CWE-1284
CVE-2026-2597Shared CWE-1284

Affected Assets

Apple
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Requires validation of all inputs to the mashREPL tool, directly preventing crashes from malformed pasted data such as 300-character buffers of repeated characters.

prevent

Implements safeguards against denial-of-service events like application crashes triggered by oversized or malformed network inputs to the REPL tool.

prevent

Ensures error handling for malformed inputs in the mashREPL tool does not result in application crashes, maintaining availability.

References