CVE-2021-27201 | BDVDB-2026-149200 Detail

Description#

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/MucahitSaratar/endian_firewall_authenticated_rce
https://www.endian.com/company/news/endian-community-releases-new-version-332-148/
https://sourceforge.net/projects/efw/files/Development/EFW-3.3.2/

Exploit#

No public exploit known

History#

Version 12021-02-15Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.