Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2021-33393

🗓️ 09 Jun 2021 21:25:52Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 123 Views🌐 WEB

IPFire 2.25-core155 lfs/backup does not ensure root ownership of backup.p

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for CVE-2021-33393
16 May 202618:08
–githubexploit
0day.today		IPFire 2.25 Remote Code Execution Exploit
15 Jun 202100:00
–zdt
Circl		CVE-2021-33393
14 Jun 202123:08
–circl
CNNVD		IPFire Firewall 安全漏洞
9 Jun 202100:00
–cnnvd
CNVD		IPFire Firewall Remote Code Execution Vulnerability
11 Jun 202100:00
–cnvd
Check Point Advisories		IPFire Remote Code Execution (CVE-2021-33393)
1 Jun 202100:00
–checkpoint_advisories
Cvelist		CVE-2021-33393
9 Jun 202121:25
–cvelist
Exploit DB		IPFire 2.25 - Remote Code Execution (Authenticated)
17 May 202100:00
–exploitdb
Metasploit		IPFire 2.25 Core Update 156 and Prior pakfire.cgi Authenticated RCE
15 Jun 202117:50
–metasploit
NVD		CVE-2021-33393
9 Jun 202122:15
–nvd
Rows per page
NVD
Node
ipfireipfireRange<2.25
OR
ipfireipfireMatch2.25core_update141
OR
ipfireipfireMatch2.25core_update142
OR
ipfireipfireMatch2.25core_update143
OR
ipfireipfireMatch2.25core_update144
OR
ipfireipfireMatch2.25core_update145
OR
ipfireipfireMatch2.25core_update146
OR
ipfireipfireMatch2.25core_update147
OR
ipfireipfireMatch2.25core_update148
OR
ipfireipfireMatch2.25core_update149
OR
ipfireipfireMatch2.25core_update150
OR
ipfireipfireMatch2.25core_update151
OR
ipfireipfireMatch2.25core_update152
OR
ipfireipfireMatch2.25core_update155
OR
ipfireipfireMatch2.25core_update156
ParameterPositionPathDescriptionCWE
INSPAKSrequest body/cgi-bin/pakfire.cgiAuthenticated command injection via pakfire.cgi enabling remote code execution as root.
ACTIONrequest body/cgi-bin/pakfire.cgiAuthenticated command injection via pakfire.cgi enabling remote code execution as root.
xrequest body/cgi-bin/pakfire.cgiAuthenticated command injection via pakfire.cgi enabling remote code execution as root.
yrequest body/cgi-bin/pakfire.cgiAuthenticated command injection via pakfire.cgi enabling remote code execution as root.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 06:08Current
8.5High risk
Vulners AI Score8.5
CVSS 3.18.8
CVSS 29
EPSS0.72182
cve-2021-33393ipfiresecuritybackupownershippermissionsvulnerabilitynvd
123