Approved changes feed: RSS · Atom

cpe:2.3:a:cypress:200:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCypress (8ddcbdb0-5af3-5fee-b501-b6d9908b84c2)
Product200 (6121ad88-3480-5af0-b435-407ecc6139ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47745 vulnerable 2026-06-08 05:38:07.561537 Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection via Firmware Upgrade
HIGH (8.8)
Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the firmware upgrade script that allows remote attackers to execute shell commands. Attackers can exploit the 'fw_url' parameter in the ctm-config-upgrade.sh script to inject and execute arbitrary commands with root privileges.
Published: 2025-12-31T18:39:11.864Z
Updated: 2026-03-05T14:31:59.052Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.