CVE-2021-38611: Nascent Remkon Device Manager

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to execute arbitrary commands, as root, via shell metacharacters in the filename parameter to assets/index.php.

Affected products

• Nascent Remkon Device Manager: version 4.0.0.0 only

Published 2021-08-24. Last modified 2026-06-17.