Read the docs
TI-2021-22432 Aliases CVE-2021-47816GHSA-6qxr-24qm-qr24

Thecus N4800Eco Nas Server Control Panel - Command Injection

Priority MEDIUM 59CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands with administrative privileges.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01805 78th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ThecusThecus N4800Eco Nas Server Control PanelN4800Eco—No fix listedCNA
  • Thecus N4800Eco Nas Server Control Panel VendorThecus Affected N4800Eco Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-47816
  2. 2026-10-03 Alias added: GHSA-6qxr-24qm-qr24

References

Exploit 2

Other 2

  • TI-2013-04832 The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute… CVSS 2.0HIGH 10.0
  • TI-2021-13275 Thecus 4800Eco was discovered to contain a command injection vulnerability via the… CVSS 3.1CRITICAL 9.8
  • TI-2013-04834 The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for… CVSS 2.0HIGH 7.8
  • TI-2013-04833 The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows… CVSS 2.0HIGH 7.8
  • TI-2008-00770 PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server… CVSS 2.0MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences