CVE-2021-20143

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers (affected versions not specified)

Description: An unauthenticated command injection issue exists in the parameters of operation 48 in the controller server service. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller server service on port 9999, specifically the "controller server" service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.