← Database

CVE-2021-38306

CRITICAL CVSS: 9.8 Published: 2021-08-24 Modified: 2026-06-17

Description

Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.

Affected Platforms

Lg N1T1Lg N1T1 FirmwareLg N1T1Dd1

Weakness Type

CWE-78

References