CVE-2021-46422
CVE-2021-46422
Vexday Risk Score
60Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS —EPSS 94.8%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
27 Apr 2022Published on NVD
17 May 2022Public PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.
Affected products
n/a · n/apublic PoCs found — 17
githubgithub.com/Chocapikk/CVE-2021-46422★ 3githubgithub.com/Awei507/CVE-RCE★ 3githubgithub.com/yyqxi/CVE-2021-46422★ 2githubgithub.com/polerstar/CVE-2021-46422-poc★ 1githubgithub.com/kailing0220/CVE-2021-46422★ 1githubgithub.com/nobodyatall648/CVE-2021-46422★ 1githubgithub.com/xanszZZ/SDT_CW3B1_rce★ 1githubgithub.com/latings/CVE-2021-46422★ 1githubgithub.com/kelemaoya/CVE-2021-46422★ 0githubgithub.com/twoning/CVE-2021-46422_PoC★ 0githubgithub.com/CJ-0107/cve-2021-46422★ 0githubgithub.com/yigexioabai/CVE-2021-46422_RCE★ 0githubgithub.com/ZAxyr/CVE-2021-46422★ 0exploitdbwww.exploit-db.com/exploits/50948unverifiedcve_referencepacketstormsecurity.com/files/167387/Telesquare-SDT-CW3B1-1.1.0-Command-Injection.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50936unverifiedcve_referencepacketstormsecurity.com/files/167201/SDT-CW3B1-1.1.0-Command-Injection.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →