CVE-2021-44132: C-Data ONU4FERW Project C-Data ONU4FERW Firmware

High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days.

A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers to execute arbitrary commands via a crafted file.

Affected products

• C-Data ONU4FERW Project C-Data ONU4FERW Firmware: up to and including 2.1.13_x139

Published 2022-02-25. Last modified 2026-06-17.