CVEs-PoC/2021/CVE-2021-27201.md

### [CVE-2021-27201](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27201)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.

### POC

#### Reference
- https://github.com/MucahitSaratar/endian_firewall_authenticated_rce
- https://www.endian.com/company/news/endian-community-releases-new-version-332-148/

#### Github
- https://github.com/MucahitSaratar/endian_firewall_authenticated_rce