How severe is CVE-2021-31891?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 10 out of 10.

What type of vulnerability is CVE-2021-31891?

This is classified as CWE-78, which is a common weakness in software security.

CVE-2021-31891

CRITICAL Year: 2021

CVSS v3 Score

10.0

Critical

CVSS v2 Score

10.0

Critical

Weakness Type

CWE-78

View all →

Vulnerability Description

A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier), Siveillance Control Pro (All versions). The affected application incorrectly neutralizes special elements in a specific HTTP GET request which could lead to command injection. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the system with root privileges.

CVE-2015-7426

CRITICAL

CVSS:10.0(Critical)

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 an...

CWE-782015

CVE-2016-10043

CRITICAL

CVSS:10.0(Critical)

An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use ...

CWE-782016

CVE-2019-19897

CRITICAL

CVSS:10.0(Critical)

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT A...

CWE-782019

CVE-2019-4202

CRITICAL

CVSS:10.0(Critical)

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to t...

CWE-782019

CVE-2019-5127

CRITICAL

CVSS:10.0(Critical)

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Enco...

CWE-782019