CVE-2021-35402

PROLiNK / PRC2402M PUBLISHED

Description (CNA)

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).

Affected (CNA)

Vendor / product	Versions
PROLiNK / PRC2402M	affected 20190909 before 2021-06-13

CWE

CWE-78

References

https://starlabs.sg/advisories/21/21-35402/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.