CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

Command injection

Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php...

CVE-2021-34111

The CVE-2021-34111 entry describes a command-injection vulnerability in Thecus 4800Eco, exploitable via the username parameter in /adm/setmain.php. CVSS v3.1 base score 9.8 (CRITICAL) with network access, no authentication, and no user interaction. The connected documents confirm the affected pro...