CVE-2021-4242: Sapido BR270n/BRC76n/GR297/RB1732 syscmd.htm os command injection

Published Nov 30, 2022
·
Updated

A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214592.

Affected Software

8 affected components
Sapido Br270n Firmware=2.1.03
Sapido BR270n
Sapido Brc76n Firmware=2.1.03
Sapido BRC76n
Sapido Gr297n Firmware=2.1.3
Sapido GR297n
Sapido Rb-1732 Firmware=2.0.43
Sapido Rb-1732

Event History

Nov 30, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the vulnerability ID for this Sapido router vulnerability?

The vulnerability ID for this Sapido router vulnerability is CVE-2021-4242.

2

What is the severity of CVE-2021-4242?

CVE-2021-4242 has a severity score of 8.8, which is classified as high.

3

Which functionality is affected by CVE-2021-4242?

CVE-2021-4242 affects the functionality of the file ip/syscmd.htm.

4

Can the attack be launched remotely?

Yes, the attack can be launched remotely.

5

How can I fix CVE-2021-4242?

There is currently no known fix for CVE-2021-4242. It is recommended to follow the vendor's advisory and apply any updates or patches when available.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203