Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv2

CVE-2021-27201

Published: 15/02/2021 Updated: 12/07/2022
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Subscribe to Endian

Vulnerability Summary

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

endian firewall community 3.3.2

Github Repositories

https://github.com/MucahitSaratar/endian_firewall_authenticated_rce

endian_firewall_authenticated_rce CVE-2021-27201 Endinan Firewall Community version 332 authenticated remote code execution as nobody when i was start create backup, output of ps command is be interesting and checking the input is validated ? no we can run commandcheck the permission we can run command as nobody 1-) login in web application 2-) create backup and sel

References

CWE-78https://github.com/MucahitSaratar/endian_firewall_authenticated_rcehttps://www.endian.com/company/news/endian-community-releases-new-version-332-148/https://sourceforge.net/projects/efw/files/Development/EFW-3.3.2/https://nvd.nist.govhttps://github.com/MucahitSaratar/endian_firewall_authenticated_rce
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook