CVE-2021-42165: Mitrastar Gpt-2541gnac-n1 Firmware

High severity, CVSS 8.8. EPSS: 14.1% chance of exploitation in the next 30 days.

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path".

Affected products

  • Mitrastar Gpt-2541gnac-n1 Firmware: version br_g3.5_100vnz0b33 only

Published 2022-05-03. Last modified 2026-06-17.