OS Command Injection Vulnerability in Acmailer Products
CVE-2021-46686

9.8CRITICAL

Key Information:

Vendor: Extra Innovation Inc.
Status: Acmailer Cgi; Acmailer Db
Vendor: CVE Published:; 18 February 2025

🔔 Create Extra Innovation Inc. Vulnerability Alert

What is CVE-2021-46686?

An OS command injection flaw exists in Acmailer CGI and Acmailer DB that allows attackers to execute arbitrary OS commands. This vulnerability arises from improper handling of special characters in user input, which can be exploited to infiltrate the system. Users of affected versions must take immediate action to mitigate risks associated with this security issue.

Affected Version(s)

acmailer CGI ver.4.0.3 and earlier

acmailer DB ver.1.1.5 and earlier

References

https://acmailer.jp/info/de.cgi?id=103

https://www.acmailer.jp/info/de.cgi?id=102

https://jvn.jp/en/jp/JVN96957439/

CVSS V3.0

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 18, 2025

CVE-2021-46686 Data

JSON