Endian · Endian Firewall Community · CVE-2021-27201
Name of the Vulnerable Software and Affected Versions:
Endian Firewall Community (aka EFW) version 3.3.2
Description:
The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.
Recommendations:
For Endian Firewall Community (aka EFW) version 3.3.2, consider restricting access to the backup functionality to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using shell metacharacters in backup comments.