CVE-2021-42165

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path".

Affected products

Mitrastar Gpt-2541Gnac-N1

Mitrastar gpt-2541gnac-n1 Firmware

= br_g3.5_100vnz0b33

CVSS 2.0

9.0 HIGH

CVSS 3.1

8.8 HIGH

EPSS

14.1% (96th percentile)

Weakness

CWE-78

NVD status

Modified

Published

2022-05-03