CVE-2021-20638: OS Command Injection
Published Feb 12, 2021
·Updated
LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.
Affected Software
2 affected components
Logitech Lan-w300n\/pgrb Firmware
Logitech Lan-w300n\/pgrb
Event History
Feb 12, 2021
CVE Published
via MITRE·06:15 AM
Data Sourced
via MITRE·06:15 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-20638?
CVE-2021-20638 is rated as a high-severity vulnerability due to its potential for remote command execution with administrative privileges.
2
How do I fix CVE-2021-20638?
To mitigate CVE-2021-20638, update the LOGITEC LAN-W300N/PGRB firmware to the latest version provided by the manufacturer.
3
Who is affected by CVE-2021-20638?
Devices running the affected LOGITEC LAN-W300N/PGRB firmware with administrative access are vulnerable to CVE-2021-20638.
4
What type of vulnerability is CVE-2021-20638?
CVE-2021-20638 is an OS command injection vulnerability that allows unauthorized execution of commands.
5
Is CVE-2021-20638 under active exploitation?
There have been no widely reported active exploits for CVE-2021-20638, but it presents a serious risk if left unaddressed.