PoC Index

CVE-2021-42165

HIGH 9.0EPSS 14.1%

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path".

CVSS v3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS
14.10% chance of exploitation in the next 30 days, 96th percentile
Published
2022-05-03
Updated
2024-08-04

Proof-of-concept exploits (1)

ExploitDB entries (1)

References

Related