CVE-2021-4473

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers can exploit this vulnerability to write malicious PHP files into the web root and achieve remote code execution with the privileges of the web server process. This vulnerability has been fixed in version NACFirmware_4.0.0.7_20210716.180815_topsec_0_basic.bin. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-06-01 (UTC).

• CWE-78

• https://avd.aliyun.com/detail?id=AVD-2021-890232Third Party Advisory
• https://cn-sec.com/archives/4631959.htmlExploit, Third Party Advisory
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-41972Third Party Advisory
• https://www.cnvd.org.cn/patchInfo/show/280166Patch
• https://www.vulncheck.com/advisories/tianxin-internet-behavior-management-system-command-injection-via-toquery-phpThird Party Advisory, VDB Entry

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44718wolfSSL through 5.0.0 allows an attacker to cause a denial o…5.9
• CVE-2021-44719Docker Desktop 4.3.0 has Incorrect Access Control.8.4
• CVE-2021-4472The mistral-dashboard plugin for openstack has a local file …6.5
• CVE-2021-44720In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1…7.2
• CVE-2021-44725KNIME Server before 4.13.4 allows directory traversal in a r…7.5
• CVE-2021-44726KNIME Server before 4.13.4 allows XSS via the old WebPortal …6.1
• CVE-2021-44730snapd 2.54.2 did not properly validate the location of the s…8.8
• CVE-2021-44731A race condition existed in the snapd 2.54.2 snap-confine bi…7.8
• CVE-2021-44732Mbed TLS before 3.0.1 has a double free in certain out-of-me…9.8
• CVE-2021-44733A use-after-free exists in drivers/tee/tee_shm.c in the TEE …7
• CVE-2021-44734Embedded web server input sanitization vulnerability in Lexm…9.8
• CVE-2021-44735Embedded web server command injection vulnerability in Lexma…9.8