What’s Vulnerable › Vulnerabilities

CVE-2021-47747: meterN 1.2.3 Authenticated Remote Code Execution via Admin Scripts

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-31 · updated 2026-06-17
• Weakness: CWE-78

Description

meterN 1.2.3 contains an authenticated remote code execution vulnerability in admin_meter2.php and admin_indicator2.php scripts. Attackers can exploit the 'COMMANDx' and 'LIVECOMMANDx' POST parameters to execute arbitrary system commands with administrative privileges.

Affected products

• meterN: 1.2.3

References

• https://web.archive.org/web/20210617084455/https://www.metern.org/
• https://www.exploit-db.com/exploits/50596
• https://www.vulncheck.com/advisories/metern-authenticated-remote-code-execution-via-admin-scripts
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5690.php

Get alerted when CVE-2021-47747 or the next vulnerability affects your stack