PT-2025-6480 · Unknown · Acmailer Db+1

Published 2025-02-17 · Updated 2025-02-18 · CVE-2021-46686

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions acmailer CGI versions 4.0.3 and earlier acmailer DB versions 1.1.5 and earlier

Description An issue exists with the improper neutralization of special elements used in an OS command, which can lead to the execution of arbitrary OS commands by an attacker. This issue is related to OS Command Injection.

Recommendations For acmailer CGI versions 4.0.3 and earlier, update to a version later than 4.0.3 to resolve the issue. For acmailer DB versions 1.1.5 and earlier, update to a version later than 1.1.5 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable components until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-46686

Affected Products

Acmailer Cgi

Acmailer Db

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2021-46686 · Security Note
• https://twitter.com/cybercronai/status/1891797460038685069 · Twitter Post
• https://t.me/cvedetector/18267 · Telegram Post
• https://twitter.com/CVEnew/status/1891653702722912608 · Twitter Post
• https://acmailer.jp/info/de.cgi?id=103 · Note
• https://twitter.com/CveFindCom/status/1891639366469988692 · Twitter Post
• https://jvn.jp/en/jp/JVN96957439 · Note
• https://acmailer.jp/info/de.cgi?id=102 · Note