Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-27821

The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.5%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2021-27821
  • Openwrt » Luci » Version: 0.10.0
    cpe:2.3:a:openwrt:luci:0.10.0
  • Openwrt » Luci » Version: 0.11.0
    cpe:2.3:a:openwrt:luci:0.11.0
  • Openwrt » Luci » Version: 0.11.1
    cpe:2.3:a:openwrt:luci:0.11.1
  • Openwrt » Luci » Version: 0.8.0
    cpe:2.3:a:openwrt:luci:0.8.0
  • Openwrt » Luci » Version: 0.8.1
    cpe:2.3:a:openwrt:luci:0.8.1
  • Openwrt » Luci » Version: 0.8.2
    cpe:2.3:a:openwrt:luci:0.8.2
  • Openwrt » Luci » Version: 0.8.3
    cpe:2.3:a:openwrt:luci:0.8.3
  • Openwrt » Luci » Version: 0.8.4
    cpe:2.3:a:openwrt:luci:0.8.4
  • Openwrt » Luci » Version: 0.8.5
    cpe:2.3:a:openwrt:luci:0.8.5
  • Openwrt » Luci » Version: 0.8.6
    cpe:2.3:a:openwrt:luci:0.8.6
  • Openwrt » Luci » Version: 0.8.7
    cpe:2.3:a:openwrt:luci:0.8.7
  • Openwrt » Luci » Version: 0.8.8
    cpe:2.3:a:openwrt:luci:0.8.8
  • Openwrt » Luci » Version: 0.9.0
    cpe:2.3:a:openwrt:luci:0.9.0
  • Openwrt » Luci » Version: 19.07.0
    cpe:2.3:a:openwrt:luci:19.07.0


Contact Us

Shodan ® - All rights reserved