{"id":"CVE-2021-46422","aliases":[],"url":"https://o3.security/vulnerability/CVE-2021-46422","summary":"Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.","details":"Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.","published":"2022-04-27T13:15:09.173","modified":"2026-06-17T04:14:52.050","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.94342,"percentile":0.99845,"asOf":"2026-09-15"},"cisaKev":null,"exploitsKnown":8,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/167201/SDT-CW3B1-1.1.0-Command-Injection.html"},{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/167387/Telesquare-SDT-CW3B1-1.1.0-Command-Injection.html"},{"type":"EXPLOIT","url":"https://drive.google.com/drive/folders/1YJlVlb4SlTEGONzIjiMwd2P7ucP_Pm7T?usp=sharing"},{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/167201/SDT-CW3B1-1.1.0-Command-Injection.html"},{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/167387/Telesquare-SDT-CW3B1-1.1.0-Command-Injection.html"},{"type":"EXPLOIT","url":"https://drive.google.com/drive/folders/1YJlVlb4SlTEGONzIjiMwd2P7ucP_Pm7T?usp=sharing"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T04:14:52.050"}}