Vulnerability in N/a
CVE-2021-42071
In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharacters in the cgi-bin/slogin/login.py User-Agent HTTP header.
EPSS: 0.913 (99.7th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- www.exploit-db.com/exploits/50098 (x_refsource_MISC)
- visual-tools.com/ (x_refsource_MISC)
- www.swascan.com/security-advisory-visual-tools-dvr-cve-2021-42071/ (x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-42071?
- CVE-2021-42071 is a vulnerability in N/a. Published 2021-10-07.
- Is CVE-2021-42071 known to be exploited?
- 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.