CVE-2021-41738

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands

published June 11, 2022

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01828 · 78.7th percentile
Published
2022-06-11T13:26Z
EPSS history
Timeline
  • 11 JUN 13:26Z
    ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands
    cvelistv5