RaspAP 2.6.6
Approved changes feed: RSS · Atom
cpe:2.3:a:raspap:raspap:2.6.6:*:*:*:*:*:*:*
part: a version: 2.6.6 update: *
| Vendor | Raspap (5831232f-10fa-554e-a59f-3a7e3ebbcc90) |
|---|---|
| Product | Raspap (cebfa0b7-52ff-5dc0-9c21-833bfb3435c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/raspap/raspap-webgui |
purl2cpe | 2026-06-01 10:13:29.430675 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-38557 |
vulnerable | 2026-06-08 05:33:47.872206 |
Details available
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh with any executable content.
Published: 2021-08-24T12:33:01.000Z
Updated: 2024-08-04T01:44:23.480Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38556 |
vulnerable | 2026-06-08 05:33:47.871771 |
Details available
includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection.
Published: 2021-08-24T12:33:07.000Z
Updated: 2024-08-04T01:44:23.508Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.