CVE-2021-39273

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/1N3/Sn1per/issues/358Exploit, Third Party Advisory
https://github.com/1N3/Sn1per/releasesRelease Notes, Third Party Advisory
https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274Exploit, Third Party Advisory
https://github.com/1N3/Sn1per/issues/358Exploit, Third Party Advisory
https://github.com/1N3/Sn1per/releasesRelease Notes, Third Party Advisory
https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274Exploit, Third Party Advisory

Timeline

Published: Aug 19, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-392749.8In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user CVE-2021-392759.8ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functio CVE-2021-392786.1Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-CVE-2021-392798.8Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.CVE-2021-39287.8vim is vulnerable to Use of Uninitialized Variable CVE-2021-392808.8Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1 CVE-2021-392827.5Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.CVE-2021-392835.5liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.CVE-2021-392856.1A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8. An attacker can use the administration web interface URL to create a CVE-2021-392866.1Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.CVE-2021-392897.5Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113,CVE-2021-39298.2A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like