CoreCVE
Back

HIGH

On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authentication by the attacker) because the system C library function is used unsafely

Published Feb 22, 2021

Description

On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authentication by the attacker) because the system C library function is used unsafely.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Feb 22, 2021
Updated Aug 3, 2024
Reserved Jan 14, 2021
Link CVE-2021-3149

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2021-3149

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Feb 22, 2021
Updated Aug 3, 2024
Link EUVD-2021-26493

GitHub

No data