frameworks_base_AOSP10_r33_CVE-2021-20138

This repository does not have a README...

CVE-2021-20138

An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to th...

CVE-2021-20138

The CVE-2021-20138 entry concerns a command injection vulnerability in the Gryphon Tower router web interface (/cgi-bin/luci/rc). According to the provided documents, an unauthenticated attacker on the same network can send a crafted packet to the web interface and execute commands as root on the...