Unscored CVE-2021-27201 EUVD-2021-13966GHSA-v5rr-334g-rqm6

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a …

Published Feb 15, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.

References

https://github.com/MucahitSaratar/endian_firewall_authenticated_rce
https://www.endian.com/company/news/endian-community-releases-new-version-332-148/
https://sourceforge.net/projects/efw/files/Development/EFW-3.3.2/