RaspAP Command Injection (CVE-2021-38556)

A command injection vulnerability exists in RaspAP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-38556

CVE-2021-38556 concerns a command injection in includes/configure_client.php within RaspAP 2.6.6. The Red Hat, OSV, GitHub advisories and CNVD/CVE records consistently describe a vulnerability where an attacker could execute arbitrary commands on the affected system via this PHP component. The im...