CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability

published December 16, 2021

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands with a semicolon.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10085 · 95.6th percentile
Published
2021-12-16T16:54Z
EPSS history
Timeline
  • 16 DEC 16:54Z
    FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability
    cvelistv5