CVE-2021-35402

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).

Score

CVSS 3.1 10.0 Critical

Status

Deferred - cve@mitre.org

Published

2026-02-20

Last modified

2026-02-23

Weaknesses

CWE-78

Affected products

• Prc2402m (Prolink)

References

• https://starlabs.sg/advisories/21/21-35402/