CVE-2021-31726

CVE-2021-31726

> [Description]
> Akuvox C315 115.116.2613 allows remote command Injection via the
> cfgd_server service. The attack vector is sending a payload to port 189
> (default root 0.0.0.0).
>
> ------------------------------------------
>
> [VulnerabilityType Other]
> Command Injection
>
> ------------------------------------------
>
> [Vendor of Product]
> Akuvox
>
> ------------------------------------------
>
> [Affected Product Code Base]
> C315 - version affected: 115.116.2613 (last),  version fix: None
>
> ------------------------------------------
>
> [Affected Component]
> The cfgd_server service
>
> ------------------------------------------
>
> [Attack Type]
> Remote
>
> ------------------------------------------
>
> [Impact Code execution]
> true
>
> ------------------------------------------
>
> [Attack Vectors]
> Send payload to port 189 (default root 0.0.0.0)  of device
>
> ------------------------------------------
>
> [Reference]
> https://www.akuvox.com/ProductsDisp.aspx?pid=21
>
> ------------------------------------------
>
> [Has vendor confirmed or acknowledged the vulnerability?]
> true
>
> ------------------------------------------
>
> [Discoverer]
> Hà Toàn

CVE-2021-31726.