Lucene search
HistoryAug 22, 2022 - 3:15 p.m.
CVE-2021-37289
cve-2021-37289
insecure permissions
planex mzk-dp150n
system command execution
administration interface
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.6%
Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etc_ro/web/syscmd.asp.
Affected configurations
Node
planexmzk-dp150n
planexmzk-dp150n_firmwareMatch1.42
ORplanexmzk-dp150n_firmwareMatch1.43
| Vendor | Product | Version | CPE |
|---|---|---|---|
| planex | mzk-dp150n | * | cpe:2.3:h:planex:mzk-dp150n:*:*:*:*:*:*:*:* |
| planex | mzk-dp150n_firmware | 1.42 | cpe:2.3:o:planex:mzk-dp150n_firmware:1.42:*:*:*:*:*:*:* |
| planex | mzk-dp150n_firmware | 1.43 | cpe:2.3:o:planex:mzk-dp150n_firmware:1.43:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2021-37289
2022-08-22 14:34:20
prion
prion
Command injection
2022-08-22 15:15:00
cve
cve
CVE-2021-37289
2022-08-22 15:15:13
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.6%
Related for NVD:CVE-2021-37289