Zeroshell

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Zeroshell records in CISA KEV

No Zeroshell vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Zeroshell 4 records CRITICAL

Records

4 records in Zeroshell · all components

TI-2009-00524 CVE-2009-0545 · GHSA-9p53-hww6-pm2p

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute…

CRITICAL 86

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.90386 Published 2009-02-12 No fix listed CWE-20

TI-2019-09518 CVE-2019-12725 · GHSA-83mm-jfvg-jxxh

Zeroshell 3.9.0 is prone to a remote command execution vulnerability.

CRITICAL 85

Zeroshell 3.9.0 is prone to a remote command execution vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.89955 Published 2019-07-19 No fix listed CWE-78

TI-2020-17668 CVE-2020-29390 · GHSA-wfh6-xhqh-h5xw

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet…

HIGH 69

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39565 Published 2020-11-30 No fix listed CWE-78

TI-2021-18395 CVE-2021-41738 · GHSA-qp5f-6g86-h75x

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter…

MEDIUM 42

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0181 Published 2022-06-11 No fix listed CWE-78

Open these records in search →

Critical	3
High	1
Medium	0
Low	0
No CVSS	0