High severity8.8NVD Advisory· Published Jun 9, 2021· Updated Jun 17, 2026

CVE-2021-33356

Description

Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component that can result in remote command execution with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

RaspAP/RaspAP2 versions
cpe:2.3:a:raspap:raspap:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:raspap:raspap:*:*:*:*:*:*:*:*range: >=1.5,<=2.6.5
- (no CPE)
RaspAP/raspap-webguillm-fuzzy
Range: 1.5 to 2.6.5

Patches

Vulnerability mechanics

References

github.com/RaspAP/raspap-webgui/blob/5a7b77459839c9420fac0d10ec28cee1af9bb782/installers/common.shnvdExploitThird Party Advisory
github.com/RaspAP/raspap-webgui/blob/5a7b77459839c9420fac0d10ec28cee1af9bb782/installers/common.shnvdExploitThird Party Advisory
github.com/RaspAP/raspap-webgui/blob/5a7b77459839c9420fac0d10ec28cee1af9bb782/installers/common.shnvdExploitThird Party Advisory
github.com/RaspAP/raspap-webgui/blob/5a7b77459839c9420fac0d10ec28cee1af9bb782/installers/common.shnvdExploitThird Party Advisory
github.com/RaspAP/raspap-webgui/blob/5a7b77459839c9420fac0d10ec28cee1af9bb782/installers/common.shnvdExploitThird Party Advisory
gist.github.com/omriinbar/52c000c02a6992c6ce68d531195f69cfnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000