CVE-2021-43463

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An Unquoted Service Path vulnerability exists in Ext2Fsd v0.68 via a specially crafted file in the Ext2Srv Service executable service path.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-428

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/198746Third Party Advisory, VDB Entry
https://github.com/M507/MinerExploit, Third Party Advisory
https://www.exploit-db.com/exploits/49706Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/198746Third Party Advisory, VDB Entry
https://github.com/M507/MinerExploit, Third Party Advisory
https://www.exploit-db.com/exploits/49706Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Apr 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-434648.8A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is mod CVE-2021-434669.8In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code executio CVE-2021-434698.8VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component.CVE-2021-43476.5The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vul CVE-2021-434717.5In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the CVE-2021-434749.8An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 (Lastest) via any parameter in the HNAP1 function CVE-2021-434785.4A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, w CVE-2021-434799.8A Remote Code Execution (RCE) vulnerability exists in The-Secretary 2.5 via install.php.CVE-2021-43486.1The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the export_settings & import_s CVE-2021-434819.8An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php.CVE-2021-434838.0An Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration, which could allow a malicious user to read CVE-2021-434849.8A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the e