Description
A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to execute arbitrary commands, as root, via shell metacharacters in the filename parameter to assets/index.php.
Unscored
CVE-2021-38611
EUVD-2021-25051GHSA-x2vg-c4cj-x56w
A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to execute arb…
Published Aug 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre