April 11, 2022 · Applied Cybernetics Group
CVE-2021-27852 — Checkbox Checkbox Survey
Checkbox Survey Deserialization of Untrusted Data Vulnerability
- Added to KEV
2022-04-11- Federal due date
2022-05-02- Vendor
- Checkbox
- Product
- Checkbox Survey
- EPSS
- 98.1th percentile (score 0.319, as of
2026-07-13) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2021-27852
CISA short description
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.
Required action
Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.