Security Advisory

CVE-2021-38306

9.8
CRITICAL

Vulnerability Description

Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.
Published Date August 24, 2021
Official Source NIST NVD Advisory