{"cvss":0.0,"datePublished":"2021-12-21T00:00:00Z","dateUpdated":"2021-12-21T00:00:00Z","description":"A vulnerability exists in RaspAP 2.6 to 2.6.5 in the \"iface\" GET parameter in /ajax/networking/get_netcfg.php, when the \"iface\" parameter value contains special characters such as \";\" which enables an unauthenticated attacker to execute arbitrary OS commands.","dueDate":"","id":"CVE-2021-33357","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"raspap","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"raspap raspap Improper Neutralization of Special Elements used in an OS Command","vendor":"raspap"}