8.8
CWE
78 707 74 77
Advisory Published
Updated

CVE-2021-4242: Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection

First published: Wed Nov 30 2022(Updated: )

A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214592.

Credit: cna@vuldb.com

Affected SoftwareAffected VersionHow to fix
Sapido Br270n Firmware=2.1.03
Sapido BR270n
Sapido Brc76n Firmware=2.1.03
Sapido Brc76n
Sapido Gr297n Firmware=2.1.3
Sapido GR297n
Sapido Rb-1732 Firmware=2.0.43
Sapido Rb-1732

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID for this Sapido router vulnerability?

    The vulnerability ID for this Sapido router vulnerability is CVE-2021-4242.

  • What is the severity of CVE-2021-4242?

    CVE-2021-4242 has a severity score of 8.8, which is classified as high.

  • Which functionality is affected by CVE-2021-4242?

    CVE-2021-4242 affects the functionality of the file ip/syscmd.htm.

  • Can the attack be launched remotely?

    Yes, the attack can be launched remotely.

  • How can I fix CVE-2021-4242?

    There is currently no known fix for CVE-2021-4242. It is recommended to follow the vendor's advisory and apply any updates or patches when available.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203