CVE-2021-33357

creationtimestamp| type| source ---|---|--- 2025-02-03 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-03 2025-02-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-08 2026-04-10 00:00:00+00:00| seen| The Shadowserver...

RaspAP Command Injection (CVE-2021-33357)

A command injection vulnerability exists in RaspAP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-33357

RaspAP versions 2.6–2.6.5 are affected by a remote command-injection vulnerability in /ajax/networking/get_netcfg.php where the iface parameter can include special characters (e.g., ";") to execute arbitrary OS commands. The issue is unauthenticated and can allow remote code execution. Affected s...