CVE-2021-41583 Command injection in n/a
Authenticated attackers can execute OS commands via QR code interaction, gaining filesystem access and escalating privileges in eduVPN.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-41583?
CVE-2021-41583 is a medium-severity command injection vulnerability in n/a, published on 24 Sep 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated users to obtain OS filesystem access, because of the interaction of QR codes with an exec that uses the -r option. This can be leveraged to obtain additional VPN access.
Weakness: CWE-20
Which versions are affected by CVE-2021-41583?
It affects 1 product.
Products include Eduvpn Vpn-User-Portal.
How do I fix CVE-2021-41583?
No fix has been published for CVE-2021-41583 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2021-41583 being exploited?
There is no known exploitation of CVE-2021-41583 in the wild and no public exploit code.
Sources
Also known as GHSA-v5fp-56v2-97qv.