Skip to main content

Opensysusers

1 CVEs product

Monthly

CVE-2021-40084 CRITICAL POC Act Now

opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Code Injection Opensysusers
NVD GitHub
CVSS 3.1
9.8
EPSS
2.7%
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

opensysusers through 0.6 does not safely use eval on files in sysusers.d that may contain shell metacharacters. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Code Injection Opensysusers
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy