What’s Vulnerable › Vulnerabilities

CVE-2021-42071

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 69.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-07 · updated 2026-06-17
• Weakness: CWE-78

Description

In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharacters in the cgi-bin/slogin/login.py User-Agent HTTP header.

Affected products

• Visual-Tools Dvr Vx16 Firmware: 4.2.28.0

References

• https://visual-tools.com/
• https://www.exploit-db.com/exploits/50098
• https://www.swascan.com/security-advisory-visual-tools-dvr-cve-2021-42071/
• https://visual-tools.com/
• https://www.exploit-db.com/exploits/50098
• https://www.swascan.com/security-advisory-visual-tools-dvr-cve-2021-42071/

Get alerted when CVE-2021-42071 or the next vulnerability affects your stack