CVE-2021-38471

CWE-434: UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE
There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files.
Successful exploitation of these vulnerabilities could allow an attacker to achieve remote code execution, and acquire complete remote control over the machine.
Read: “Claroty, Auvesy Coordinate Disclosure on Versiondog Vulnerabilities”