CVE-2021-47747: Metern

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

meterN 1.2.3 contains an authenticated remote code execution vulnerability in admin_meter2.php and admin_indicator2.php scripts. Attackers can exploit the 'COMMANDx' and 'LIVECOMMANDx' POST parameters to execute arbitrary system commands with administrative privileges.

Affected products

• Metern Metern: version 1.2.3 only

Published 2025-12-31. Last modified 2026-06-17.