Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-4242

A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214592.

Published

2022-11-30T14:15:10.670

Last Modified

2024-11-21T06:37:13.137

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-707
Type: Primary
CWE-78

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	sapido	br270n_firmware	2.1.03	Yes
Hardware	sapido	br270n	-	No
Operating System	sapido	brc76n_firmware	2.1.03	Yes
Hardware	sapido	brc76n	-	No
Operating System	sapido	gr297n_firmware	2.1.3	Yes
Hardware	sapido	gr297n	-	No
Operating System	sapido	rb-1732_firmware	2.0.43	Yes
Hardware	sapido	rb-1732	-	No

References

https://blog.csdn.net/qq_44159028/article/details/114590267 Exploit, Third Party Advisory ([email protected])
https://github.com/smallpiggy/Sapido--rce/blob/main/Sapido%E8%B7%AF%E7%94%B1%E5%99%A8-rce.py Exploit, Third Party Advisory ([email protected])
https://vuldb.com/?id.214592 Third Party Advisory ([email protected])
https://blog.csdn.net/qq_44159028/article/details/114590267 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/smallpiggy/Sapido--rce/blob/main/Sapido%E8%B7%AF%E7%94%B1%E5%99%A8-rce.py Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.214592 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)