CVE-2021-42165 | BDVDB-2026-175137 Detail

Description#

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path".

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/50351
https://packetstormsecurity.com/files/164333/Mitrastar-GPT-2541GNAC-N1-Privilege-Escalation.html
https://github.com/leoservalli/Privilege-escalation-MitraStar/blob/main/README.md

Exploit#

No public exploit known

History#

Version 12022-05-03Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.