CVE-2021-43118
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-43118
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary code.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款 DrayTek Vigor 产品命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Draytek DrayTek Vigor3900等都是中国台湾居易科技（Draytek）公司的产品。DrayTek Vigor3900是一款宽带路由器/VPN网关设备。DrayTek Vigor2960等都是中国DrayTek公司的产品。DrayTek Vigor2960是一款双 WAN 宽带路由器/VPN 网关。DrayTek Vigor300B是一款运行在 Linux 系统上的 Quad-WAN 负载均衡宽带路由器。 DrayTek Vigor 2960 1.5.1.3版本、DrayTek Vigo
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2021-43118
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-43118
请登录查看更多情报信息。
Same Patch Batch · n/a · 2022-03-29 · 37 CVEs total
| CVE-2022-26951 | 6.5 MEDIUM | RSA Archer 跨站脚本漏洞 |
| CVE-2022-26947 | 6.3 MEDIUM | RSA Archer跨站脚本漏洞 |
| CVE-2022-26948 | 5.8 MEDIUM | RSA Archer安全漏洞 |
| CVE-2022-26950 | 5.4 MEDIUM | RSA Archer 输入验证错误漏洞 |
| CVE-2022-26949 | 5.3 MEDIUM | RSA Archer 安全漏洞 |
| CVE-2022-23937 | 5.3 MEDIUM | Wind River VxWorks 缓冲区错误漏洞 |
| CVE-2015-3298 | Yubico ykneo-openpgp 数据伪造问题漏洞 | |
| CVE-2021-42970 | cxuucms跨站脚本漏洞 | |
| CVE-2022-22948 | VMware vCenter Server 安全漏洞 | |
| CVE-2022-1122 | OpenJPEG 安全漏洞 | |
| CVE-2021-43109 | PuneethReddyHc Online Shopping System Advanced SQL注入漏洞 | |
| CVE-2021-43110 | PuneethReddyHc Online Shopping System Advanced 访问控制错误漏洞 | |
| CVE-2021-42911 | Draytek多款产品格式化字符串错误漏洞 | |
| CVE-2021-44082 | Textpattern CMS 跨站脚本漏洞 | |
| CVE-2022-26244 | Sourcecodester Hospital Patient Records Management System 跨站脚本漏洞 | |
| CVE-2021-44081 | Open5Gs 缓冲区错误漏洞 | |
| CVE-2022-27815 | SWHKD 后置链接漏洞 | |
| CVE-2022-27432 | Pluck 跨站请求伪造漏洞 | |
| CVE-2021-41594 | RSA Archer 安全漏洞 | |
| CVE-2021-44581 | Kreado Kreasfero SQL注入漏洞 |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2021-43118
No comments yet