CVE-2021-37912criticalCWE-78

CVE-2021-37912: critical vulnerability in HGiga OAKlouds OAKSv2

HGiga OAKlouds - Command Injection-1

Published · Updated

Follow this CVE+ Monitor OAKlouds OAKSv2+ Monitor OAKlouds OAKSv3

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 2.8%
The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
HGiga · OAKlouds OAKSv2HGiga · OAKlouds OAKSv3
Related CVEs — HGiga OAKlouds OAKSv2

In the same product, most dangerous first.

CVE-2021-37913CRITICALHGiga OAKlouds - Command Injection-2EPSS 2.8%