All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2021-35402
CRITICALpublished 2026-02-20 19:23 UTC · 6 months ago · modified 2026-06-17 03:57 UTC
10.0
CVSS / 10
// description
PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).
// weaknesses (CWE)
- CWE-78