Circutor SGE-PLC1000 OS command Injection
CVE-2021-33841

10CRITICAL

Key Information:

Vendor

Circutor

Status
Sge-plc1000
Vendor
CVE Published:
9 June 2021

What is CVE-2021-33841?

SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SGE-PLC1000 0.9.2b

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/ci...
x_refsource_CONFIRM

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Industrial Cybersecurity team of S21sec, special mention to Aarón Flecha Menéndez.
JSON
.