CVE-2021-38458

CWE-74 IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS IN OUTPUT USED BY A DOWNSTREAM COMPONENT ('INJECTION'):
The affected product is vulnerable to improper neutralization of special elements, which may allow an attacker to remotely execute unauthorized commands. This could allow an attacker to disable software or read and modify otherwise inaccessible data.

Risk Information

  • CVE ID
  • CVE-2021-38458
  • Vendor
  • Moxa
  • Product
  • MXview Network Management System
  • CVSS v3
  • 9.8