CVE-2021-38306
Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.
CVSS 3.1 · 9.8 Critical
EPSS 9.0%
KEV · Not listed
Vendors
Products