CVE-2021-27449

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Dec 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-274507.8SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which couCVE-2021-274519.8Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain acCVE-2021-274527.8The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentiCVE-2021-274539.8Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an CVE-2021-274547.8The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies thCVE-2021-274555.5Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may allCVE-2021-274562.4Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.CVE-2021-274577.5A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encrypCVE-2021-274587.5If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCCVE-2021-274599.8A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products alloCVE-2021-274609.8Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data wiCVE-2021-274617.5A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow a
CVE-2021-27449: High severity, CVSS 8.8 | Vulnix