{"id":"CVE-2021-46422","published":"2022-04-27T11:04:00Z","modified":"2024-08-04T05:02:11Z","title":"Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.","provenance":"source","from":"CVE.org"},"summary":{"text":"The Telesquare SDT-CW3B1 1.1.0 device contains an OS command injection flaw. An unauthenticated remote attacker with network access can execute arbitrary OS commands on the device, with no authentication or user interaction required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:40Z"},"cvss":null,"epss":{"score":0.94425,"percentile":0.99851,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2022-12-06","exploitedFirstSeen":"2022-12-06","ransomware":false,"evidence":[{"url":"https://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilities","date":"2022-12-06"},{"url":"https://blog.netlab.360.com/new-ddos-botnet-wszeor/","date":"2022-12-07"},{"url":"https://t.me/hacking_Attack/79492","date":"2022-12-08"},{"url":"https://www.microsoft.com/en-us/security/blog/2022/12/21/microsoft-research-uncovers-new-zerobot-capabilities/","date":"2022-12-21"},{"url":"https://fortiguard.fortinet.com/threat-signal-report/4926/new-zerobot-variant-exploits-additional-vulnerabilities-for-propagation","date":"2022-12-22"},{"url":"https://cujo.com/blog/the-2022-2023-iot-botnet-report-vulnerabilities-targeted/","date":"2023-04-27"},{"url":"https://cujo.com/the-2022-2023-iot-botnet-report-vulnerabilities-targeted/","date":"2023-04-27"},{"url":"https://unit42.paloaltonetworks.com/mirai-variant-targets-iot-exploits/","date":"2023-06-22"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-14&host_type=src&vulnerability=cve-2021-46422","date":"2023-11-14"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-15&host_type=src&vulnerability=cve-2021-46422","date":"2023-11-15"}],"evidenceTotal":705,"provenance":"source"},"exploited":true,"otx":{"pulseCount":28,"pulses":[{"name":"PaperCut NG/MF Unauth RCE Chain CVE-2026-81578 + CVE-2026-82078","url":"https://otx.alienvault.com/pulse/6a92768bd33a1062c052d128","created":"2026-08-29"},{"name":"miniOrange WordPress SAML Auth Bypass (CVE-2026-15981 / CVE-2026-61979) Active Scanning","url":"https://otx.alienvault.com/pulse/6a91254414ce28be7487a61c","created":"2026-08-28"},{"name":"Elementor Pro CVE-2026-32475 Unauth PHP Upload RCE","url":"https://otx.alienvault.com/pulse/6a8bdf16b6e0f7552e8ec5ce","created":"2026-08-24"},{"name":"New Mirai-Based Linux Botnet 'Evooo1Bot' Turns Victims Into Proxies","url":"https://otx.alienvault.com/pulse/6a840752614dc26560c9093e","created":"2026-08-18"},{"name":"Multi-Functional Linux Botnet “Evooo1Bot”","url":"https://otx.alienvault.com/pulse/6a833514ae125f3cc03d7366","created":"2026-08-17"},{"name":"Multi-Functional Linux Botnet “Evooo1Bot”","url":"https://otx.alienvault.com/pulse/6a8334fd77aa677ff456bfd9","created":"2026-08-17"},{"name":"Multi-Functional Linux Botnet “Evooo1Bot”","url":"https://otx.alienvault.com/pulse/6a8334fc78855f417bfefa12","created":"2026-08-17"},{"name":"Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies","url":"https://otx.alienvault.com/pulse/6a82e8aa5592b7ddd68c71f6","created":"2026-08-17"},{"name":"Multi-Functional Linux Botnet \"Evooo1Bot\"","url":"https://otx.alienvault.com/pulse/6a82968f2b7eb61829fd93a5","created":"2026-08-17"},{"name":"New Mirai-Based Linux Botnet 'Evooo1Bot' Turns Victims Into Proxies","url":"https://otx.alienvault.com/pulse/6a7f349eb2e90e5a682c7e6f","created":"2026-08-14"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://drive.google.com/drive/folders/1YJlVlb4SlTEGONzIjiMwd2P7ucP_Pm7T?usp=sharing","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/167201/SDT-CW3B1-1.1.0-Command-Injection.html","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/167387/Telesquare-SDT-CW3B1-1.1.0-Command-Injection.html","tags":["x_refsource_MISC"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: unauthenticated remote attack on device interface","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allows a remote attacker to execute OS commands without any authentication","start":85,"end":159}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: OS command injection yields command execution","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allows a remote attacker to execute OS commands","start":85,"end":132}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-b3ea000916d84bc1c41a","title":"Microsoft research uncovers new Zerobot capabilities","publisher":"microsoft.com","url":"http://www.microsoft.com/en-us/security/blog/2022/12/21/microsoft-research-uncovers-new-zerobot-capabilities/","date":null,"mentions":[{"quote":"efender for IoT has alerts for the following vulnerabilities and exploits which may be tied to Zerobot activity:\nCVE-2014-8361\nCVE-2016-20017\nCVE-2017-17105\nCVE-2017-17215\nCVE-2018-10561\nCVE-2018-20057\nCVE-2019-10655\nCVE-2020-7209\nCVE-2020-10987\nCVE-2020-25506\nCVE-2021-35395\nCVE-2021-36260\nCVE-2021-42013\nCVE-2021-46422","start":11844,"end":12164}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-33100","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-33100","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":50936,"url":"https://www.exploit-db.com/exploits/50936","title":"SDT-CW3B1 1.1.0 - OS Command Injection","type":"remote","platform":"hardware","date":"2022-05-17","verified":false,"provenance":"source"},{"id":50948,"url":"https://www.exploit-db.com/exploits/50948","title":"Telesquare SDT-CW3B1 1.1.0 - OS Command Injection","type":"remote","platform":"hardware","date":"2022-06-03","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2022-05-17"},"pocGithub":{"count":12,"skipped":1,"earliest":"2022-05-24","earliestUrl":"https://github.com/nobodyatall648/CVE-2021-46422","repos":[{"name":"Awei507/CVE-RCE","url":"https://github.com/Awei507/CVE-RCE","stars":3,"created":"2022-10-15"},{"name":"Chocapikk/CVE-2021-46422","url":"https://github.com/Chocapikk/CVE-2021-46422","stars":2,"created":"2022-06-20"},{"name":"yyqxi/CVE-2021-46422","url":"https://github.com/yyqxi/CVE-2021-46422","stars":2,"created":"2022-10-16"},{"name":"nobodyatall648/CVE-2021-46422","url":"https://github.com/nobodyatall648/CVE-2021-46422","stars":1,"created":"2022-05-24"},{"name":"xanszZZ/SDT_CW3B1_rce","url":"https://github.com/xanszZZ/SDT_CW3B1_rce","stars":1,"created":"2022-10-16"}]},"nuclei":[{"id":"CVE-2021-46422","name":"SDT-CW3B1 1.1.0 - OS Command Injection","severity":"critical","path":"http/cves/2021/CVE-2021-46422.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46422.yaml"}],"first":{"date":"2022-05-17","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/50936"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/167201/SDT-CW3B1-1.1.0-Command-Injection.html","http://packetstormsecurity.com/files/167387/Telesquare-SDT-CW3B1-1.1.0-Command-Injection.html"],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1059"],"provenance":"ai"}],"timeline":[{"date":"2022-04-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-46422","provenance":"source"},{"date":"2022-05-17","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-50936); later: PoC-in-GitHub 2022-05-24","url":"https://www.exploit-db.com/exploits/50936","provenance":"source"},{"date":"2022-12-06","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilities","provenance":"source"}],"speed":{"daysToPublicExploit":20,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":66.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1425 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.97,"detail":"percentile 0.9985"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"2 Exploit-DB entries; 2 NVD exploit links; 12 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"28 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}