Roxy Wi CVE-2021-38169

HIGH

Command Injection (CWE-77)

2021-08-07 cve@mitre.org

Command Injection Roxy Wi

8.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 07, 2021 - 18:15 nvd

HIGH 8.8

DescriptionNVD

Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.

AnalysisAI

Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Command Injection (CWE-77), which allows attackers to inject arbitrary commands into system command execution. Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py. Affected products include: Roxy-Wi. Version information: through 5.2.2.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized APIs, avoid shell execution, validate input with strict allowlists.

More in Roxy Wi

View all

CVE-2022-31137 CRITICAL Act Now POC

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Rated critical severity (CVSS 9.8

CVE-2022-31161 CRITICAL Act Now POC

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Rated critical severity (CVSS 9.8), this

CVE-2022-31126 CRITICAL Act Now POC

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Rated critical sever

CVE-2022-31125 CRITICAL Act Now POC

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Rated critical sever

CVE-2024-43804 HIGH This Week POC

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Rated high severity (CVSS 8.8), t

CVE-2026-22265 HIGH This Week POC

Authenticated command injection in Roxy-WI versions prior to 8.2.8.2 enables attackers to execute arbitrary system comma

CVE-2023-25803 HIGH This Week POC

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Rated high severity (CVSS 7.5),

CVE-2023-25802 HIGH This Week POC

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Rated high severity (CVSS 7.5),

CVE-2023-29004 MEDIUM This Month POC

hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Rated medium severity (CVS

CVE-2021-38167 CRITICAL Act Now

Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. Rated critical severity (CVSS 9.8), this vulnerability is

CVE-2023-25804 MEDIUM This Month POC

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Rated medium severity (CVSS 5.3)

CVE-2021-38168 HIGH This Week

Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers. Rated high severity (CVSS 8.8), this vuln

Same weakness CWE-77 – Command Injection

View all

CVE-2024-21887 CRITICAL POC

CVE-2012-1823 CRITICAL POC

CVE-2016-1555 CRITICAL POC

CVE-2015-2051 HIGH POC

CVE-2017-6327 HIGH POC

CVE-2023-34960 CRITICAL POC

CVE-2023-37679 CRITICAL POC

CVE-2025-10035 CRITICAL POC

Same technique Command Injection

View all

CVE-2012-1823 CRITICAL POC

CVE-2016-1555 CRITICAL POC

CVE-2014-6271 CRITICAL POC

CVE-2015-2051 HIGH POC

CVE-2014-6278 HIGH POC

CVE-2017-6334 HIGH POC

CVE-2024-50603 CRITICAL POC

CVE-2025-64328 HIGH POC

Share

CVE-2021-38169 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy