CVE-2021-35402

critical · 10

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).

CVSS

1.0%

EPSS (exploit prob.)

60th

EPSS percentile

2026-02-20

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-78

References

https://starlabs.sg/advisories/21/21-35402/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-35402