CVE-2021-40845
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-40845
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Zenitel AlphaCom XE Audio Server 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Zenitel AlphaCom XE Audio Server是挪威Zenitel公司的一个混合对讲系统。该系统支持所有 VINGTOR-STENTOFON IP 和模拟对讲站。 Zenitel AlphaCom XE Audio Server存在安全漏洞，该漏洞允许远程shell上传。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2021-40845
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | AlphaWeb XE, the embedded web server running on AlphaCom XE, has a vulnerability which allows to upload PHP files leading to RCE once the authentication is successful - https://ricardojoserf.github.io/CVE-2021-40845/ | https://github.com/ricardojoserf/CVE-2021-40845 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-40845
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2021-40845 (2)
Security Blog Posts for CVE-2021-40845 (1)
- https://ricardojoserf.github.io/CVE-2021-40845/x_refsource_MISC
Other References for CVE-2021-40845 (1)
- https://github.com/ricardojoserf/CVE-2021-40845x_refsource_MISC
Same Patch Batch · n/a · 2021-09-15 · 50 CVEs total
| CVE-2021-30137 | 7.7 HIGH | Axios Systems Assyst 代码问题漏洞 |
| CVE-2021-40965 | TinyFileManager 跨站请求伪造漏洞 | |
| CVE-2020-21322 | FeehiCMS 代码问题漏洞 | |
| CVE-2020-21480 | RGCMS 安全漏洞 | |
| CVE-2020-21481 | RGCMS 代码问题漏洞 | |
| CVE-2020-21482 | RGCMS 跨站脚本漏洞 | |
| CVE-2020-21483 | Jizhicms 代码问题漏洞 | |
| CVE-2021-33045 | Dahua IPC 授权问题漏洞 | |
| CVE-2021-33044 | Dahua IPC 授权问题漏洞 | |
| CVE-2021-28901 | SITA Software Azur CMS 跨站脚本漏洞 | |
| CVE-2021-40964 | TinyFileManager 路径遍历漏洞 | |
| CVE-2016-20012 | OpenSSH 安全漏洞 | |
| CVE-2021-40966 | TinyFileManager 跨站脚本漏洞 | |
| CVE-2021-40156 | Autodesk Navisworks 缓冲区错误漏洞 | |
| CVE-2021-40155 | Autodesk Navisworks 缓冲区错误漏洞 | |
| CVE-2021-27046 | Autodesk Navisworks 缓冲区错误漏洞 | |
| CVE-2021-27045 | Autodesk Navisworks 缓冲区错误漏洞 | |
| CVE-2021-37412 | TechRadar app 跨站脚本漏洞 | |
| CVE-2021-40238 | Webuzo 跨站脚本漏洞 | |
| CVE-2020-21127 | Metinfo MetInfo SQL注入漏洞 |
Showing top 20 of 50 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-10116
Open5GS ue-authentications Endpoint ogs-timer.c ogs_sbi_xact - CVE-2026-10115
Open5GS Shared NF-profile nnrf-handler.c denial of service - CVE-2026-10114
Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out - CVE-2026-10113
Open5GS Shared NF-profile nnrf-handler.c denial of service - CVE-2026-39292
PHPPageBuilder v0.31.0任意文件上传致RCE
V. Comments for CVE-2021-40845
No comments yet