CVE-2021-45966

An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters.

• CWE-78

• https://kerbit.io/research/read/blog/4Exploit, Third Party Advisory
• https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.htmlExploit, Third Party Advisory
• https://www.pascom.net/doc/en/release-notes/Release Notes, Vendor Advisory
• https://kerbit.io/research/read/blog/4Exploit, Third Party Advisory
• https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.htmlExploit, Third Party Advisory
• https://www.pascom.net/doc/en/release-notes/Release Notes, Vendor Advisory

Published

Mar 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45955Dnsmasq 2.86 has a heap-based buffer overflow in resize_pack…9.8
• CVE-2021-45956Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (…9.8
• CVE-2021-45957Dnsmasq 2.86 has a heap-based buffer overflow in answer_requ…9.8
• CVE-2021-45958UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer…5.5
• CVE-2021-45959Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-45960In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or…8.8
• CVE-2021-45967An issue was discovered in Pascom Cloud Phone System before …9.8
• CVE-2021-45968An issue was discovered in xmppserver jar in the XMPP Server…7.5
• CVE-2021-45969An issue was discovered in AhciBusDxe in Insyde InsydeH2O wi…8.2
• CVE-2021-45970An issue was discovered in IdeBusDxe in Insyde InsydeH2O wit…8.2
• CVE-2021-45971An issue was discovered in SdHostDriver in Insyde InsydeH2O …8.2
• CVE-2021-45972The giftrans function in giftrans 1.12.2 contains a stack-ba…7.1