CVE:CVE-2021-42165
CNNVD:CNNVD-202205-1952
Mitrastar GPT-2541GNAC-N1是一款路由器。
Mitrastar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 固件版本存在操作系统命令注入漏洞，该漏洞源于参数“path”的清理不正确。远程验证攻击者利用此漏洞可通过执行命令“deviceinfo show file &&/bin/bash”来获得 root 访问权限
solution:Upgrade mitrastar gpt-2541gnac-n1_firmware to a higher version than br_g3.5_100vnz0b33,and avoid the version br_g3.5_100vnz0b33