Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-20144
HistoryDec 09, 2021 - 4:15 p.m.

Command injection

2021-12-0916:15:00
PRIOn knowledge base
www.prio-n.com
4

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller_server service on port 9999.

CPENameOperatorVersion
gryphon_tower_firmwarele04.0004.12

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

Related for PRION:CVE-2021-20144