Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-33356

Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component that can result in remote command execution with root privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.111
EPSS Ranking 93.1%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
Products affected by CVE-2021-33356
  • Raspap » Raspap » Version: 1.5
    cpe:2.3:a:raspap:raspap:1.5
  • Raspap » Raspap » Version: 1.5.1
    cpe:2.3:a:raspap:raspap:1.5.1
  • Raspap » Raspap » Version: 1.6
    cpe:2.3:a:raspap:raspap:1.6
  • Raspap » Raspap » Version: 1.6.1
    cpe:2.3:a:raspap:raspap:1.6.1
  • Raspap » Raspap » Version: 1.6.2
    cpe:2.3:a:raspap:raspap:1.6.2
  • Raspap » Raspap » Version: 2.0
    cpe:2.3:a:raspap:raspap:2.0
  • Raspap » Raspap » Version: 2.1
    cpe:2.3:a:raspap:raspap:2.1
  • Raspap » Raspap » Version: 2.2
    cpe:2.3:a:raspap:raspap:2.2
  • Raspap » Raspap » Version: 2.3
    cpe:2.3:a:raspap:raspap:2.3
  • Raspap » Raspap » Version: 2.3.1
    cpe:2.3:a:raspap:raspap:2.3.1
  • Raspap » Raspap » Version: 2.4
    cpe:2.3:a:raspap:raspap:2.4
  • Raspap » Raspap » Version: 2.4.1
    cpe:2.3:a:raspap:raspap:2.4.1
  • Raspap » Raspap » Version: 2.5
    cpe:2.3:a:raspap:raspap:2.5
  • Raspap » Raspap » Version: 2.5.1
    cpe:2.3:a:raspap:raspap:2.5.1
  • Raspap » Raspap » Version: 2.5.2
    cpe:2.3:a:raspap:raspap:2.5.2
  • Raspap » Raspap » Version: 2.6
    cpe:2.3:a:raspap:raspap:2.6
  • Raspap » Raspap » Version: 2.6.1
    cpe:2.3:a:raspap:raspap:2.6.1
  • Raspap » Raspap » Version: 2.6.2
    cpe:2.3:a:raspap:raspap:2.6.2
  • Raspap » Raspap » Version: 2.6.3
    cpe:2.3:a:raspap:raspap:2.6.3
  • Raspap » Raspap » Version: 2.6.4
    cpe:2.3:a:raspap:raspap:2.6.4
  • Raspap » Raspap » Version: 2.6.5
    cpe:2.3:a:raspap:raspap:2.6.5


Contact Us

Shodan ® - All rights reserved