CVE-2021-44159

9.8 criticalEPSS 3.5%

Critical (9.8) in 4mosan gcb doctor. EPSS 3.5% chance of exploitation in the next 30 days.

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2021-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

4mosan:gcb_doctor

References

https://www.twcert.org.tw/tw/cp-132-5395-eee40-1.html
https://www.twcert.org.tw/tw/cp-132-5395-eee40-1.html

Check your stack JSON