What’s Vulnerable › Vulnerabilities

CVE-2021-27201

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-02-15 · updated 2026-06-17
• Weakness: CWE-78

Description

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.

Affected products

• Endian Firewall: 3.3.2

References

• https://github.com/MucahitSaratar/endian_firewall_authenticated_rce
• https://sourceforge.net/projects/efw/files/Development/EFW-3.3.2/
• https://www.endian.com/company/news/endian-community-releases-new-version-332-148/
• https://github.com/MucahitSaratar/endian_firewall_authenticated_rce
• https://sourceforge.net/projects/efw/files/Development/EFW-3.3.2/
• https://www.endian.com/company/news/endian-community-releases-new-version-332-148/

Get alerted when CVE-2021-27201 or the next vulnerability affects your stack