CVE-2021-29003: Genexis Platinum 4410 Firmware

Critical severity, CVSS 9.8. EPSS: 45.4% chance of exploitation in the next 30 days.

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.

Affected products

• Genexis Platinum 4410 Firmware: version p4410-v2-1.28 only

Published 2021-04-13. Last modified 2026-06-17.