CVE-2021-20139

The CVE-2021-20139 entry concerns Gryphon Tower routers, where an unauthenticated command injection affects the controller_server service (operation 3). A remote attacker on the same network can send a crafted packet to the controller_server on port 9999 to execute commands as root on the device....