CVE-2021-47745 - Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection via Firmware Up...

CVE ID : CVE-2021-47745 Published : Dec. 31, 2025, 6:39 p.m. | 30 minutes ago Description : Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the firmware upgrade script that allows remote attackers to execute shell commands. Attackers can exploit the 'fw_url' parameter in the ctm-config-upgrade.sh script to inject and execute arbitrary commands with root privileges. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor