CVE-2021-42338

9.8 criticalEPSS 5.8%

Critical (9.8) in 4mosan gcb doctor. EPSS 5.8% chance of exploitation in the next 30 days.

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-285
Published: 2021-11-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

4mosan:gcb_doctor

References

https://www.twcert.org.tw/tw/cp-132-5313-45bde-1.html
https://www.twcert.org.tw/tw/cp-132-5313-45bde-1.html

Check your stack JSON