Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "deviceinfo show file" is supposed to be used from restricted shell to show files and directories. By providing " /bin/sh" (quotes included) to the argument of this command will drop a root shell.

Last Modified: Apr 15, 2026

Published: Aug 26, 2025

CVE-2024-9977

MitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection

Last Modified: Apr 15, 2026

Published: Oct 15, 2024

CVE-2023-33381

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2). The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function.

Last Modified: Jan 08, 2025

Published: Jun 06, 2023

CVE-2023-30065

MitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b32 was discovered to contain a remote code execution (RCE) vulnerability in the ping function.

Last Modified: Jan 29, 2025

Published: May 05, 2023

CVE-2021-42165

MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path".

Last Modified: Nov 21, 2024

Published: May 03, 2022

Items Per Page