CVE-2021-38306

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.lg.com/uk/support/product/lg-N1T1DD1Product, Vendor Advisory
https://www.lg.com/us/burners-drives/lg-N1T1-network-attached-storageProduct, Vendor Advisory
https://zerosecuritypenetrationtesting.com/?page_id=306Exploit, Third Party Advisory, URL Repurposed
https://www.lg.com/uk/support/product/lg-N1T1DD1Product, Vendor Advisory
https://www.lg.com/us/burners-drives/lg-N1T1-network-attached-storageProduct, Vendor Advisory
https://zerosecuritypenetrationtesting.com/?page_id=306Exploit, Third Party Advisory, URL Repurposed

Timeline

Published: Aug 24, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-38316.1gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-383117.5In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled,CVE-2021-383126.5The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoi CVE-2021-383145.3The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress registered several AJAX actions available to unauthenticated CVE-2021-383156.1The SP Project & Document Manager WordPress plugin is vulnerable to attribute-based Reflected Cross-Site Scripting via the from and to param CVE-2021-383166.1The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category_name parameter in the ~/admin-CVE-2021-383176.1The Konnichiwa! Membership WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the plan_id parameter in the ~/views/subscri CVE-2021-383186.1The 3D Cover Carousel WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter in the ~/cover-carousel.php file CVE-2021-383196.1The More From Google WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~CVE-2021-38329.8Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could CVE-2021-383206.1The simpleSAMLphp Authentication WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] va CVE-2021-383216.1The Custom Menu Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the selected_menu parameter found in the ~/custo