What’s Vulnerable › Vulnerabilities

CVE-2021-44132

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-25 · updated 2026-06-17
• Weakness: CWE-77

Description

A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers to execute arbitrary commands via a crafted file.

Affected products

• C-Data Onu4Ferw Project C-Data Onu4Ferw Firmware: through 2.1.13_x139

References

• https://exploitwriter.wordpress.com/2021/11/19/remote-code-execution-in-c-data-onu4ferw/
• https://exploitwriter.io/2022/02/25/os-command-injection-in-c-data-onu4ferw-cve-2021-44132/
• https://exploitwriter.wordpress.com/2021/11/19/remote-code-execution-in-c-data-onu4ferw/

Get alerted when CVE-2021-44132 or the next vulnerability affects your stack