CVE-2021-46422

CVSS 3.1: 9.8 critical
EPSS: 94%p100
Published: Apr 27, 2022 · Apr 27, 2022
Modified: Jun 17, 2026

Analyze CVE-2021-46422 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.

Vendors: telesquare

Products: sdt-cs3b1 firmware

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (94.4%)

In the news

4 stories

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

Fortinet researchers documented Evooo1Bot, a new Mirai-derived Linux botnet active since July 2026 that exploits known edge-device flaws to build SOCKS5 proxy networks.

The Hacker NewsAug 17, 09:29 UTC · Aug 17, 2026MalwareExploitedCVE-2007-3010 CVE-2016-6277 CVE-2018-14558+151 · 1 read

New Mirai botnet targets tens of flaws in popular IoT devices

Security AffairsJun 22, 20:58 UTC · Jun 22, 2023MalwareCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+131

New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

FortiGuard Labs disclosed Evooo1Bot, a Mirai-based Linux botnet active since July 2026 that hijacks routers and IoT devices for DDoS, credential theft, and SOCKS5 proxying.

Security AffairsAug 18, 07:20 UTC · Aug 18, 2026MalwareExploitedCVE-2007-3010 CVE-2016-6277 CVE-2018-14558+71 · 1 read

IoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits

Unit 42 tracks a Mirai botnet campaign exploiting over 20 IoT vulnerabilities in routers, cameras and DVRs to build DDoS botnets since March 2023.

Palo Alto Unit 42Aug 17, 13:04 UTC · Aug 17, 2026MalwareExploitedCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+133 · 1 read