← back
CVE-2021-29003

CVE-2021-29003

EPSS 45.4%
Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.
Affected products
n/a · n/a
public PoCs found — 3
githubgithub.com/jaysharma786/CVE-2021-29003★ 0cve_referencepacketstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/49764unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.htmlhttps://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/