CVE-2021-44080

A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS…

published June 1, 2022

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24916 · 97.9th percentile
Published
2022-06-01T00:45Z
EPSS history
Timeline
  • 01 JUN 00:45Z
    A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS…
    cvelistv5