Skip to content
OpenAdvisories
Critical · 10.0 CVE-2021-35402 EUVD-2021-22045GHSA-68g8-2724-hq79

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip…

Published Feb 20, 2026 · Updated Feb 23, 2026 · Assigned by mitre

Vendor: PROLiNK Product: PRC2402M

Description

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).

Affected products

VendorProductAffectedFixed
PROLiNK PRC2402M 20190909 – < 2021-06-13 2021-06-13

References