CVE-2021-38613: Nascent Remkon Device Manager

Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days.

The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to upload any code to the target system and achieve remote code execution.

Affected products

• Nascent Remkon Device Manager: version 4.0.0.0 only

Published 2021-08-24. Last modified 2026-06-17.