Is CVE-2021-47814 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2021-47814 being exploited in the wild.

How severe is CVE-2021-47814?

High severity, with a CVSS score of 7.5, published 16 January 2026.

Is there a fix for CVE-2021-47814?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2021-47814 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2021-47814?

Check whether you run Nsasoft Nbmonitor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2021-47814: Nsauditor NBMonitor buffer overflow in registration code field

CVE-2021-47814 · Severity: high · CVSS 7.5 · Published 2026-01-16

NBMonitor, a network bandwidth monitoring tool, is vulnerable to a crash when processing long registration keys. An attacker can cause the application to stop functioning and potentially cause system instability by entering a specially crafted 256-character string into the registration field. This results in a denial of service, preventing legitimate users from monitoring their network traffic.

Vendors: Nsasoft.

Quick answers

Is CVE-2021-47814 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2021-47814 being exploited in the wild.
How severe is CVE-2021-47814?: High severity, with a CVSS score of 7.5, published 16 January 2026.
Which products and versions are affected?: Nsauditor NBMonitor 1.6.8.
Is there a fix for CVE-2021-47814?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2021-47814 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2021-47814?: Check whether you run Nsasoft Nbmonitor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A classic buffer overflow (CWE-120) exists in NBMonitor 1.6.8 within the registration key input field. The application fails to perform adequate bounds checking when processing the registration code, allowing a 256-character input to overwrite adjacent memory. While the primary impact is a denial of service (application crash), such overflows can sometimes lead to system instability. The attack requires local access to the application interface to paste the malicious string into the 'Key' field. A public Proof of Concept (PoC) is available, though no official patch has been confirmed in the advisory text.

Affected products

Nsauditor NBMonitor 1.6.8

Timeline

2021-06-08: disclosed: Initial exploit/PoC published on Exploit-DB
2026-01-16: advisory: CVE published/updated in NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.