CVE-2021-40222

Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse shell in the PU-Hostname field of the TCP/IP Configuration dialog. Web application fails to sanitize user input on Network TCP/IP configuration page. This allows the attacker to inject commands as root on the device which will be executed once the data is received.

• CWE-78

• https://github.com/asang17/CVE-2021-RCEExploit, Third Party Advisory
• https://github.com/asang17/CVE-2021-RCEExploit, Third Party Advisory

Published

Sep 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4021A vulnerability was found in Radare2 in versions prior to 5.…7.5
• CVE-2021-40211An issue was discovered with ImageMagick 7.1.0-4 via Divisio…7.5
• CVE-2021-40212An exploitable out-of-bounds write vulnerability in PotPlaye…9.8
• CVE-2021-40214Gibbon v22.0.00 suffers from a stored XSS vulnerability with…5.4
• CVE-2021-40219Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsa…8.8
• CVE-2021-4022A vulnerability was found in rizin. The bug involves an ELF6…5.5
• CVE-2021-40223Rittal CMC PU III Web management (version V3.11.00_2) fails …5.4
• CVE-2021-40226xpdfreader 4.03 is vulnerable to Buffer Overflow.7.5
• CVE-2021-4023A flaw was found in the io-workqueue implementation in the L…5.5
• CVE-2021-40238A Cross Site Scriptiong (XSS) vulnerability exists in the ad…6.1
• CVE-2021-40239A Buffer Overflow vulnerability exists in the latest version…9.8
• CVE-2021-4024A flaw was found in podman. The `podman machine` function (u…6.5